Approved changes feed: RSS · Atom

cpe:2.3:a:zope:zope:2.2_beta1:*:*:*:*:*:*:*

part: a version: 2.2_beta1 update: *

VendorZope (400d8950-2847-5748-8fcd-7612c2170a9a)
ProductZope (0a3941f2-1c45-5687-af62-1666d59c833f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zopefoundation/zope purl2cpe 2026-06-01 10:18:07.137061
pkg:pypi/zope purl2cpe 2026-06-01 10:18:07.137063
pkg:sourceforge/zope purl2cpe 2026-06-01 10:18:07.137065

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2000-0725 vulnerable 2026-06-08 04:45:18.679308 Details available
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:28:41.342Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.