p PatchFirst

CVE-2000-0725

CVE-2000-0725

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.

EPSS 0.5% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • zope PyPI

    Affected ranges
    • ECOSYSTEM: < 2.2.1

    Update to 2.2.1

Original sources

Check your server →