Improper Authorization
CVE-2000-0483
Summary
The DocumentTemplate package in Zope through 2.2 allows a remote attacker to modify "DTMLDocuments" or "DTMLMethods" without authorization.
- LOW
- NETWORK
- NONE
- PARTIAL
- PARTIAL
- PARTIAL
CWE-285 - Improper Authorization
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
Advisory Timeline
- Published
