—

PYSEC-2026-675

MoinMoin Improper ACL handling for calendars and includes

상세

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / moin

최초 영향 버전: 0 수정 버전: 1.5.8

수정 pip install --upgrade 'moin>=1.5.8'

참고

https://nvd.nist.gov/vuln/detail/CVE-2007-2637 [ADVISORY]
https://exchange.xforce.ibmcloud.com/vulnerabilities/34474 [WEB]
https://moinmo.in/MoinMoinRelease1.5/CHANGES [WEB]
http://osvdb.org/36269 [WEB]
http://secunia.com/advisories/25208 [WEB]
http://secunia.com/advisories/29262 [WEB]
http://www.debian.org/security/2008/dsa-1514 [WEB]
http://www.ubuntu.com/usn/usn-458-1 [WEB]
https://pypi.org/project/moin [PACKAGE]
https://github.com/advisories/GHSA-cmg7-xr2j-4r9v [ADVISORY]