GitHub Advisoryadvisory · PyPI
GHSA-cmg7-xr2j-4r9v MoinMoin Improper ACL handling for calendars and includes
MEDIUM
Official page ↗
- Aliases
- CVE-2007-2637
- Ecosystem
- PyPI
- Packages
- moin
- Severity
- Moderate
- Reviewed
- 2024-05-14
Affected packages
• PyPI moin: < 1.5.8 → fixed in 1.5.8
Description
MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.
Related
Alias · CVE (1)
- CVE-2007-2637 MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2007-2637 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34474 web
- https://moinmo.in/MoinMoinRelease1.5/CHANGES web
- http://osvdb.org/36269 web
- http://secunia.com/advisories/25208 web
- http://secunia.com/advisories/29262 web
- http://www.debian.org/security/2008/dsa-1514 web
- http://www.ubuntu.com/usn/usn-458-1 web