GitHub Advisoryadvisory · PyPI
GHSA-jj2f-57jg-5rm6 MoinMoin Improper Access Control
MEDIUM
Official page ↗
- Aliases
- CVE-2008-1099
- Ecosystem
- PyPI
- Packages
- moin
- Severity
- Moderate
- Reviewed
- 2024-05-14
Affected packages
• PyPI moin: <= 1.5.8 (no fix yet)
Description
`_macro_Getval` in `wikimacro.py` in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.
Related
Alias · CVE (1)
- CVE-2008-1099 _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-1099 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41038 web
- https://usn.ubuntu.com/716-1 web
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html web
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html web
- http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 web
- http://moinmo.in/SecurityFixes web
- http://secunia.com/advisories/29262 web
- http://secunia.com/advisories/29444 web
- http://secunia.com/advisories/30031 web
- http://secunia.com/advisories/33755 web
- http://www.debian.org/security/2008/dsa-1514 web
- http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml web
- http://www.securityfocus.com/bid/28177 web