Approved changes feed: RSS · Atom

cpe:2.3:a:zope:zope:1.10.3:*:*:*:*:*:*:*

part: a version: 1.10.3 update: *

VendorZope (400d8950-2847-5748-8fcd-7612c2170a9a)
ProductZope (0a3941f2-1c45-5687-af62-1666d59c833f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zopefoundation/zope purl2cpe 2026-06-01 10:18:07.026176
pkg:pypi/zope purl2cpe 2026-06-01 10:18:07.026177
pkg:sourceforge/zope purl2cpe 2026-06-01 10:18:07.026179

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5102 vulnerable 2026-06-08 04:50:49.530996 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0725 vulnerable 2026-06-08 04:45:18.678194 Details available
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:28:41.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0483 vulnerable 2026-06-08 04:45:18.134720 Details available
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:21:30.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0062 vulnerable 2026-06-08 04:44:58.378878 Details available
The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
Published: 2000-04-18T04:00:00.000Z
Updated: 2024-08-08T05:05:53.919Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.