← Database

CVE-2000-1212

MEDIUM CVSS: 5.0 Published: 2000-12-18 Modified: 2026-06-16

Description

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

Affected Platforms

Zope Zope

Weakness Type

NVD-CWE-Other

References