Approved changes feed: RSS · Atom

cpe:2.3:a:zope:zope:2.2.1b1:*:*:*:*:*:*:*

part: a version: 2.2.1b1 update: *

VendorZope (400d8950-2847-5748-8fcd-7612c2170a9a)
ProductZope (0a3941f2-1c45-5687-af62-1666d59c833f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zopefoundation/zope purl2cpe 2026-06-01 10:18:07.127892
pkg:pypi/zope purl2cpe 2026-06-01 10:18:07.127894
pkg:sourceforge/zope purl2cpe 2026-06-01 10:18:07.127896

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5102 vulnerable 2026-06-08 04:50:49.546605 Details available
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Published: 2008-11-17T18:00:00.000Z
Updated: 2024-08-07T10:40:17.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1212 vulnerable 2026-06-08 04:45:19.466322 Details available
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T05:45:37.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1211 vulnerable 2026-06-08 04:45:19.464304 Details available
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T05:45:37.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.