Zope DTML implementation Improper Authentication

Description

References

• nvd.nist.gov/vuln/detail/CVE-2000-0062 · ADVISORY
• web.archive.org/web/20010218085743/http://www.securityfocus.com/bid/922 · WEB
• securityfocus.com/bid/922
• securityfocus.com/templates/archive.pike
• pypi.org/project/zope · PACKAGE
• GitHub Advisory GHSA-wcwp-r3fj-mm3p · ADVISORY

zope의 다른 취약점

• CVE-2024-51734높음 8.7Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data main…
• CVE-2023-44389보통 4.8Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is …
• CVE-2023-42458보통 5.4Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for …
• CVE-2023-41050높음 7.7AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format s…
• CVE-2021-32811높음 7.2Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In…