Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-05-03T04:00:00

Updated: 2024-08-08T04:51:07.836Z

Reserved: 2002-05-01T00:00:00

Link: CVE-2001-1278

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2001-10-10T04:00:00.000

Modified: 2024-11-20T23:37:18.880

Link: CVE-2001-1278

cve-icon Redhat

Severity :

Publid Date: 2001-10-10T00:00:00Z

Links: CVE-2001-1278 - Bugzilla