CVE-2001-1227: Zope

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Affected products

• Zope Zope: version 2.2.0 only; version 2.2.1 only; version 2.2.2 only; version 2.2.3 only; version 2.2.4 only; version 2.2.5 only

Published 2001-10-10. Last modified 2026-06-16.