Approved changes feed: RSS · Atom

cpe:2.3:a:zope:zope:2.2.0b3:*:*:*:*:*:*:*

part: a version: 2.2.0b3 update: *

VendorZope (400d8950-2847-5748-8fcd-7612c2170a9a)
ProductZope (0a3941f2-1c45-5687-af62-1666d59c833f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zopefoundation/zope purl2cpe 2026-06-01 10:18:07.123987
pkg:pypi/zope purl2cpe 2026-06-01 10:18:07.123989
pkg:sourceforge/zope purl2cpe 2026-06-01 10:18:07.123991

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5102 vulnerable 2026-06-08 04:50:49.544629 Details available
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Published: 2008-11-17T18:00:00.000Z
Updated: 2024-08-07T10:40:17.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1212 vulnerable 2026-06-08 04:45:19.466272 Details available
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T05:45:37.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1211 vulnerable 2026-06-08 04:45:19.462753 Details available
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T05:45:37.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.