Auth bypass in Moinmo Moinmoin
CVE-2008-6548
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
Vulnerability class: Broken Access Control
EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.
Affected products
- Moinmo Moinmoin — versions 1.6.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)