CVE-2000-0725

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles…

published October 13, 2000

CVSS
—
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.4th percentile
Published
2000-10-13T04:00Z
EPSS history
Timeline
  • 13 OCT 04:00Z
    Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles…
    cvelistv5