CVE-2000-1212: Zope

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

Affected products

• Zope Zope: version 2.2.0 only; version 2.2.0a1 only; version 2.2.0b1 only; version 2.2.0b2 only; version 2.2.0b3 only; version 2.2.0b4 only; …

Published 2000-12-18. Last modified 2026-09-23.