~ / search / GHSA-wc8w-gh5m-62fv

GHSA-wc8w-gh5m-62fv

MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

Source: GitHub Advisory Database (reviewed) High CVE-2008-6603

Packages

EcosystemPackageAffectedFixed in
PyPI moin < 1.6.3 1.6.3
PyPI moin >= 1.7, < 1.7.1 1.7.1

Details

As written in the advisory (Markdown source, shown as plain text).

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

References

External links from the advisory. They lead to third-party sites.