PT-2010-2468 · Moinmoin · Moinmoin

Jan Lieskovsky · Publicado 2010-02-26 · Atualizado 2022-05-02 · CVE-2010-0717

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MoinMoin versions prior to 1.8.7

Description The default configuration of cfg.packagepages actions excluded in MoinMoin does not prevent unsafe package actions, which has unspecified impact and attack vectors.

Recommendations For versions prior to 1.8.7, update to version 1.8.7 or later to resolve the issue. As a temporary workaround, consider modifying the cfg.packagepages actions excluded configuration to exclude unsafe package actions until a patch is available.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2010-0717

DSA-2014-1

GHSA-5JJR-GMQ3-F986

PYSEC-2010-3

Produtos afetados

Moinmoin

Referências · 14

• https://github.com/moinwiki/moin · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-3.yaml · Nota
• http://openwall.com/lists/oss-security/2010/02/15/2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0717 · Nota de Segurança
• http://vupen.com/english/advisories/2010/0600 · Nota
• https://osv.dev/vulnerability/GHSA-5jjr-gmq3-f986 · Aviso do Fabricante
• http://debian.org/security/2010/dsa-2014 · Aviso do Fabricante
• http://secunia.com/advisories/38903 · Nota
• https://web.archive.org/web/20140807024009/http://secunia.com/advisories/38903 · Nota
• http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES · Nota
• https://osv.dev/vulnerability/PYSEC-2010-3 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56595 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0717 · Nota
• http://moinmo.in/MoinMoinRelease1.8 · Nota