CVE-2000-0062 Zope DTML implementation Improper Authentication
Remote attackers can conduct unauthorized activities via the DTML implementation in Zope, requiring attention from Zope administrators.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0062?
CVE-2000-0062 is a critical vulnerability in n/a, published on 18 Apr 2000. It can be exploited over the network, with no action from the victim.
Official description
The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
Which versions are affected by CVE-2000-0062?
3 open source packages ship an affected version, including zope. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
zope PyPI | From 2.2.0 to 2.2.4 | None |
zope PyPI | From 2.2.0 to 2.2.4 | None |
zope PyPI | From 2.2.0 to 2.2.4 | None |
Products include Zope Zope.
How do I fix CVE-2000-0062?
No fix has been published for CVE-2000-0062 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0062 being exploited?
There is no known exploitation of CVE-2000-0062 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-32674 Remote Code Execution via traversal in TAL expressions
- CVE-2000-1211 Zope does not properly perform security registration for legacy names
- CVE-2002-0170 Zope does not properly verify the access for objects with proxy roles
- CVE-2002-0688 ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
- CVE-2001-1227 Security feature bypass in n/a
Sources
Also known as GHSA-wcwp-r3fj-mm3p, PYSEC-2026-762.