GitHub Advisoryadvisory · PyPI

GHSA-jj23-fj2v-m872 MoinMoin Improper Access Control vulnerability

HIGH Published 2022-05-02 Modified 2024-10-01 Official page ↗
Aliases
CVE-2009-4762
Ecosystem
PyPI
Packages
moin
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-284
Reviewed
2024-04-29

Affected packages

• PyPI moin: >= 1.7.0, < 1.7.3 → fixed in 1.7.3 • PyPI moin: >= 1.8.0, < 1.8.3 → fixed in 1.8.3

Description

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.

Related

Alias · CVE (1)

  • CVE-2009-4762 MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References