CVE-2000-0483
Zope DocumentTemplate package allows unauthenticated write
EPSS 1.5%
Description
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
How to fix CVE-2000-0483
No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.
- PyPI/zope—no fix listed
Is CVE-2000-0483 being exploited?
Low — EPSS is 1.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, <= 2.2
References (7)
- ADVISORYnvd.nist.gov/vuln/detail/CVE-2000-0483
- WEBexchange.xforce.ibmcloud.com/vulnerabilities/4716
- WEBweb.archive.org/web/20000819120649/http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html
- WEBweb.archive.org/web/20000819123924/http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html