The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
https://github.com/advisories/GHSA-wcwp-r3fj-mm3p
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1854
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000104222219.B41650%40schvin.net