CVE-2000-1212: Zope allows attackers to modify raw image and file data
(updated )
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
References
- www.debian.org/security/2001/dsa-007
- www.redhat.com/support/errata/RHSA-2000-135.html
- www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alert
- exchange.xforce.ibmcloud.com/vulnerabilities/5778
- github.com/advisories/GHSA-7whr-j8vf-r4wj
- nvd.nist.gov/vuln/detail/CVE-2000-1212
- web.archive.org/web/20020117134418/http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
Code Behaviors & Features
Detect and mitigate CVE-2000-1212 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →