Author: JT Smith
“There is an issue involving security registration of “legacy” names for certain object constructors such as the constructors for DTML Method Objects…. This vulnerability could allow anonymous users with enough knowledge of Zope to instantiate new DTML Method instances through the web.”
Complete advistory courtesy lwn.net.
Complete advistory courtesy lwn.net.
Category:
- Linux
