CVE-2008-6548

MoinMoin < 1.6.2 - Unauthorized File Read via RST Parser Include

Title source: llm

Description

The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.

References (3)

Core 3

Core References

Broken Link vdb-entry x_refsource_osvdb

http://osvdb.org/48877

Release Notes, Vendor Advisory x_refsource_confirm

http://moinmo.in/SecurityFixes

Broken Link, Vendor Advisory x_refsource_confirm

http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546

Scores

EPSS 0.0100

EPSS Percentile 58.7%

Details

CWE

CWE-862

Status published

Products (2)

moinmo/moinmoin 1.6.1

pypi/moin 0 - 1.6.2PyPI

Published Mar 30, 2009

Tracked Since Feb 18, 2026