Lucene search

K
osvGoogleOSV:GHSA-J5CC-3H6R-JQH4
HistoryMay 03, 2022 - 3:06 a.m.

Zope DocumentTemplate package allows unauthenticated write

2022-05-0303:06:42
Google
osv.dev
7
zope
documenttemplate
vulnerability
remote attacker
authorization

AI Score

6.8

Confidence

High

EPSS

0.016

Percentile

87.4%

The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.

AI Score

6.8

Confidence

High

EPSS

0.016

Percentile

87.4%

Related for OSV:GHSA-J5CC-3H6R-JQH4