Zope DocumentTemplate package allows unauthenticated write

Published 26 y ago 2000-06-15 · modified 4 mo ago 2026-07-06 · JSON

CVSS

7.5

v2.0 · NVD

CISA KEV

not known exploited

EPSS

3.0%

percentile 87%

Public exploits

none known

The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.

Exploit prediction (EPSS)

2.97% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

Assigned by	Version	Score	Vector
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

Ecosystem	Package	Affected	Fixed in
pypi	`zope`	<=2.2	no fix listed

Weakness

archives.neohapsis.com /archives/bugtraq/2000-06/0144.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/4716 · vdb-entry, x_refsource_XF, x_transferred
archives.neohapsis.com /archives/bugtraq/2000-07/0412.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
redhat.com /support/errata/RHSA-2000-038.html · vendor-advisory, x_refsource_REDHAT, x_transferred
zope.org /Products/Zope/Hotfix_06_16_2000/security_alert · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/1354 · vdb-entry, x_refsource_BID, x_transferred
securityfocus.com /templates/archive.pike?list=1&msg=20000616103807.A3768%40conectiva.com.br · mailing-list, x_refsource_BUGTRAQ, x_transferred
nvd.nist.gov /vuln/detail/CVE-2000-0483 · advisory
web.archive.org /web/20000819120649/http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html · web
web.archive.org /web/20000819123924/http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html · web
web.archive.org /web/20010702023709/http://www.securityfocus.com/bid/1354 · web
pypi.org /project/zope · package
github.com /advisories/GHSA-j5cc-3h6r-jqh4 · advisory

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.