PT-2020-5774 · Moinmoin+2 · Moinmoin+2
Michael Chapman
·
Published
2020-11-01
·
Updated
2020-11-24
·
CVE-2020-25074
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
MoinMoin versions 1.9.10 and earlier
Description:
The issue is related to the cache action in action/cache.py, which allows directory traversal through a crafted HTTP request. This can be exploited by an attacker who can upload attachments to the wiki, potentially leading to remote code execution. The attacker can access confidential data, compromise its integrity, and cause a denial of service.
Recommendations:
For MoinMoin versions 1.9.10 and earlier: Upgrade to a patched version, such as MoinMoin Wiki 1.9.11, which contains the necessary fixes.
As a temporary workaround, consider disabling the
cache or the AttachFile action to minimize the risk of exploitation.
Restrict write permissions, which include uploading attachments, to only trusted users.Fix
RCE
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Moinmoin
Suse
Ubuntu