pysec-2009-11
Vulnerability from pysec
Published
2009-03-30 01:30
Modified
2024-02-02 07:18
Details
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
Aliases
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "moin", "purl": "pkg:pypi/moin" }, "ranges": [ { "events": [ { "introduced": "0" } ], "type": "ECOSYSTEM" } ], "versions": [ "1.8.4", "1.8.5", "1.8.6", "1.8.7", "1.9.0", "1.9.1", "1.9.10", "1.9.11", "1.9.2", "1.9.3", "1.9.4", "1.9.5", "1.9.6", "1.9.7", "1.9.8", "1.9.9" ] } ], "aliases": [ "CVE-2008-6548" ], "details": "The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.", "id": "PYSEC-2009-11", "modified": "2024-02-02T07:18:32.552079+00:00", "published": "2009-03-30T01:30:00+00:00", "references": [ { "type": "WEB", "url": "http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546" }, { "type": "ADVISORY", "url": "http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546" }, { "type": "WEB", "url": "http://osvdb.org/48877" }, { "type": "WEB", "url": "http://moinmo.in/SecurityFixes" }, { "type": "ADVISORY", "url": "http://moinmo.in/SecurityFixes" } ] }
Loading...