CVE-2000-0725

HIGH · CVSS 7.2 EPSS 0.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2000-10-20 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2000-0725

Severity

HIGH

CVSS

7.2

EPSS

0.47%

Original Filing — NVD Description

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.