~ / search / GHSA-574f-mh6m-c6qm

GHSA-574f-mh6m-c6qm

MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration

Source: GitHub Advisory Database (reviewed) Moderate CVE-2010-0668

Packages

EcosystemPackageAffectedFixed in
PyPI moin >= 1.5, < 1.8.7 1.8.7
PyPI moin >= 1.9, < 1.9.2 1.9.2

Details

As written in the advisory (Markdown source, shown as plain text).

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.

References

External links from the advisory. They lead to third-party sites.