~ / search / GHSA-876c-qmcf-cxv6

GHSA-876c-qmcf-cxv6

MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

Source: GitHub Advisory Database (reviewed) High CVE-2010-0667

Packages

EcosystemPackageAffectedFixed in
PyPI moin >= 1.9, < 1.9.1 1.9.1

Details

As written in the advisory (Markdown source, shown as plain text).

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the `GATEWAY_INTERFACE` environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.