In breve
- CVE-2000-1212 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda zope, zope (zope).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 75.0% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
| Package | Affected versions | Patched versions |
|---|
| zope PyPI | ≥ 2.2.0, ≤ 2.2.4
| No fix yet |
| zope | = 2.2.0= 2.2.0a1= 2.2.0b1= 2.2.0b2= 2.2.0b3= 2.2.0b4= 2.2.1= 2.2.1b1= 2.2.2= 2.2.3= 2.2.4
| No fix yet |
Description
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
NVD description
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free