Description
The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | zope | >= 2.2.0, <= 2.2.4 | — | GHSA-wcwp-r3fj-mm3p |
References
- 20000104 [petrilli@digicool.com: [Zope] SECURITY ALERT] mailing-list
- 922 vdb-entry