{"id":"CVE-2000-1211","aliases":["GHSA-h2xh-jvpf-xq42","PYSEC-2026-759"],"title":"Zope does not properly perform security registration for legacy names","summary":"Zope does not properly perform security registration for legacy names","severity":"high","vendor":"zope","product":"zope","ecosystem":"pip","affected":["zope >= 2.2.0, <= 2.2.4"],"published":"2022-04-30","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-h2xh-jvpf-xq42","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-1211"},{"url":"https://web.archive.org/web/20010910131909/http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3"},{"url":"https://web.archive.org/web/20021227061438/http://www.iss.net/security_center/static/5824.php"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-125.html"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert"}],"tags":["osv","pip"],"epss":0.01439,"epssPercentile":0.71583,"ingestedAt":"2026-07-08T18:25:49.968Z","slug":"CVE-2000-1211","body":"## Overview\n\nZope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.\n\n## Affected packages\n\n- `zope >= 2.2.0, <= 2.2.4`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}