GitHub Advisoryadvisory · PyPI

GHSA-mxh8-xgq9-w782 MoinMoin Insertion of Sensitive Information into Log File

MEDIUM Published 2022-05-01 Modified 2024-05-14 Official page ↗
Aliases
CVE-2007-0902
Ecosystem
PyPI
Packages
moin
Severity
Moderate
Weaknesses
CWE-532
Reviewed
2024-05-14

Affected packages

• PyPI moin: >= 1.5.7, < 1.5.8 → fixed in 1.5.8

Description

An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "show_traceback=0" to their site configurations to disable debug tracebacks.

Related

Alias · CVE (1)

  • CVE-2007-0902 Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive… vulnerability

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References