GitHub Advisoryadvisory · PyPI

GHSA-876c-qmcf-cxv6 MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

HIGH Published 2022-05-02 Modified 2024-09-30 Official page ↗
Aliases
CVE-2010-0667
Ecosystem
PyPI
Packages
moin
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-04-01

Affected packages

• PyPI moin: >= 1.9, < 1.9.1 → fixed in 1.9.1

Description

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the `GATEWAY_INTERFACE` environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2010-0667 MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References