~ / search / GHSA-m2c4-jgmm-fvq3

GHSA-m2c4-jgmm-fvq3

MoinMoin Multiple unrestricted file upload vulnerabilities

Source: GitHub Advisory Database (reviewed) Moderate CVE-2012-6081

Packages

EcosystemPackageAffectedFixed in
PyPI moin < 1.9.6 1.9.6

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (`action/twikidraw.py`) and (2) anywikidraw (`action/anywikidraw.py`) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012.

References

External links from the advisory. They lead to third-party sites.