Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
{ "github_reviewed_at": "2023-09-18T22:28:05Z", "cwe_ids": [ "CWE-287" ], "nvd_published_at": "2000-12-16T05:00:00Z", "severity": "HIGH", "github_reviewed": true }