Description
Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes.
References
- DSA-043 vendor-advisory
- http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23
- RHSA-2001:021 vendor-advisory
- MDKSA-2001:025 vendor-advisory
- CLA-2001:382 vendor-advisory