NetSight
IP …
high7.5

CVE-2001-1227

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var…

Impact

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Affected products

VendorProductAffected versions
ZopeZope
Versions 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5

References