CVE-2000-1212

No fix known EPSS 2%

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

Published 2003-04-02 · CVE record · OSV

Products: zope

Affected upstream, no fix yet