VULNERABILITY INTELLIGENCE
CVE-2000-1212
CVSS score5 MEDIUM
EPSS probability1.54%
CISA KEVNot currently listed
Published2000-12-18
Last modified2026-09-23
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.