GitHub Advisoryadvisory · PyPI

GHSA-9xh4-wpx8-rg2w MoinMoin Improper Privilege Management

HIGH Published 2022-04-29 Modified 2024-05-09 Official page ↗
Aliases
CVE-2004-1463
Ecosystem
PyPI
Packages
Moin
Severity
High
Reviewed
2024-05-09

Affected packages

• PyPI Moin: < 1.2.3 → fixed in 1.2.3

Description

MoinMoin 1.2.2 and earlier could allow a remote attacker to gain elevated privileges, caused by an undisclosed Access Control List (ACL) vulnerability in the PageEditor.

Related

Alias · CVE (1)

  • CVE-2004-1463 Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact. vulnerability

References