What’s Vulnerable › Vulnerabilities

CVE-2001-1278

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-10-10 · updated 2026-06-16

Description

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Affected products

• zopefoundation Zope: 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4

References

• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3
• http://www.redhat.com/support/errata/RHSA-2001-115.html
• http://www.securityfocus.com/bid/3425
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3
• http://www.redhat.com/support/errata/RHSA-2001-115.html
• http://www.securityfocus.com/bid/3425

Get alerted when CVE-2001-1278 or the next vulnerability affects your stack