CVE-2001-1278

Опубликовано: 10 окт. 2001

Источник: redhat

Описание

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2001-1278
https://nvd.nist.gov/vuln/detail/CVE-2001-1278

Дополнительная информация

https://bugzilla.redhat.com/show_bug.cgi?id=1616664security flaw

Связанные уязвимости

CVE-2001-1278

nvd

почти 24 года назад

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

GHSA-mf74-w5x5-fpfg

github

больше 3 лет назад

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.