Description
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | zope | <= 2.2 | — | GHSA-j5cc-3h6r-jqh4 |
References
- 20000615 [Brian@digicool.com: [Zope] Zope security alert and 2.1.7 update [*important*]] mailing-list
- zope-dtml-remote-modify(4716) vdb-entry
- 20000728 MDKSA-2000:026 Zope update mailing-list
- RHSA-2000:038 vendor-advisory
- http://www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert
- 1354 vdb-entry
- 2000615 Conectiva Linux Security Announcement - ZOPE mailing-list