CVE-2000-0725 Zope does not properly restrict access to the getRoles method
Users with DTML editing privileges can escalate their access by modifying role lists, potentially gaining unauthorized administrative control.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2000-0725?
CVE-2000-0725 is a high-severity vulnerability in n/a, published on 13 Oct 2000. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
Which versions are affected by CVE-2000-0725?
3 open source packages ship an affected version, including zope. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
zope PyPI | All versions | 2.2.1 |
zope PyPI | All versions | 2.2.1 |
zope PyPI | All versions | 2.2.1 |
Products include Zope Zope.
How do I fix CVE-2000-0725?
Upgrade zope to 2.2.1 or later.
Is CVE-2000-0725 being exploited?
There is no known exploitation of CVE-2000-0725 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2000-0062 Zope DTML implementation Improper Authentication
- CVE-2021-32674 Remote Code Execution via traversal in TAL expressions
- CVE-2000-1211 Zope does not properly perform security registration for legacy names
- CVE-2002-0170 Zope does not properly verify the access for objects with proxy roles
- CVE-2002-0688 ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Sources
Also known as GHSA-9cmq-pj6p-hgwf, PYSEC-2026-757.