CVE-2001-1278
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods...
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Exploit likelihood
What each source reports
NVD Score used
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
CVE-2001-1278- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
CVE-2001-1278- Updated
- 2026-11-02
EUVDEUVD-2001-1259 No score
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
EUVD-2001-1259- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mf74-w5x5-fpfg No score
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods...
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
GHSA-mf74-w5x5-fpfg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1278 is a high vulnerability (CVSS 7.5) in Zope, published October 10, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.40%, the 72nd percentile. No source names a fixed version.