7.5high
CVE-2000-1211
Zope does not properly perform security registration for legacy names
Also known as GHSA-h2xh-jvpf-xq42, PYSEC-2026-759
Published 25 y ago · modified 45 d ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 73%
Public exploits
0
none known
Summary
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Exploit prediction (EPSS)
1.44% probability of exploitation in the next 30 days, higher than 73% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pypi | zope | >=2.2.0, <=2.2.4 | no fix listed |
Classification
- Weakness
- CWE-287 Improper Authentication
References
- zope.org /Products/Zope/Hotfix_2000-12-08/security_alert · x_refsource_CONFIRM, x_transferred
- linux-mandrake.com /en/security/2000/MDKSA-2000-083.php3 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
- iss.net /security_center/static/5824.php · vdb-entry, x_refsource_XF, x_transferred
- redhat.com /support/errata/RHSA-2000-125.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- osvdb.org /6282 · vdb-entry, x_refsource_OSVDB, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2000-1211 · advisory
- web.archive.org /web/20010910131909/http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · web
- web.archive.org /web/20021227061438/http://www.iss.net/security_center/static/5824.php · web
- pypi.org /project/zope · package
- github.com /advisories/GHSA-h2xh-jvpf-xq42 · advisory
Sources
- CVE List: CVE-2000-1211
- GitHub Advisory: GHSA-h2xh-jvpf-xq42
- NVD: CVE-2000-1211
- OSV: PYSEC-2026-759
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.