Zope DTML implementation Improper Authentication
Date: 2022-04
Affected: pip/zope
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2000-0062
CWE: CWE-287

The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.


Mitigations:

Architectural layers (MAESTRO):