CVE-2001-1227
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods...
CVE-2001-1227 is a high vulnerability (CVSS 7.5) in Zope, published October 10, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.42%, the 73rd percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.42%EPSS, 73rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
CVE-2001-1227- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
CVE-2001-1227- Updated
- 2026-11-02
EUVDEUVD-2001-1208No score
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
EUVD-2001-1208- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fp27-q2r7-f723No score
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods...
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
- Record
GHSA-fp27-q2r7-f723- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.