CVE-2000-1211: Zope does not properly perform security registration for legacy names
(updated )
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
References
- www.redhat.com/support/errata/RHSA-2000-125.html
- www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
- github.com/advisories/GHSA-h2xh-jvpf-xq42
- nvd.nist.gov/vuln/detail/CVE-2000-1211
- web.archive.org/web/20010910131909/http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
- web.archive.org/web/20021227061438/http://www.iss.net/security_center/static/5824.php
Detect and mitigate CVE-2000-1211 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →