GitHub Advisoryadvisory · PyPI

GHSA-52q8-877j-gghq MoinMoin vulnerable to remote code execution via cache action

HIGH Published 2020-11-11 Modified 2024-10-07 Official page ↗
Aliases
CVE-2020-25074
Ecosystem
PyPI
Packages
moin
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
Reviewed
2020-11-11

Affected packages

• PyPI moin: < 1.9.11 → fixed in 1.9.11

Description

Impact The cache action in action/cache.py allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution. Patches Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes. Workarounds It is not advised to work around this, but to upgrade MoinMoin to a patched version. That said, a work around via disabling the `cache` or the `AttachFile` action might be possible. Also, it is of course helpful if you give `write` permissions (which include uploading attachments) only to trusted users. Credits This vulnerability was discovered by Michael Chapman. For more information If you have any questions or comments about this advisory, email me at [email protected].

Related

Alias · CVE (1)

  • CVE-2020-25074 The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References