{"id":"CVE-2000-0062","aliases":["GHSA-wcwp-r3fj-mm3p","PYSEC-2026-762"],"title":"Zope DTML implementation Improper Authentication","summary":"Zope DTML implementation Improper Authentication","severity":"high","vendor":"zope","product":"zope","ecosystem":"pip","affected":["zope >= 2.2.0, <= 2.2.4"],"published":"2022-04-30","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-wcwp-r3fj-mm3p","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-0062"},{"url":"https://web.archive.org/web/20010218085743/http://www.securityfocus.com/bid/922"}],"tags":["osv","pip"],"epss":0.02236,"epssPercentile":0.8185,"ingestedAt":"2026-07-08T18:25:53.610Z","slug":"CVE-2000-0062","body":"## Overview\n\nThe DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.\n\n## Affected packages\n\n- `zope >= 2.2.0, <= 2.2.4`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}