In short
- CVE-2007-0902 is a MEDIUM (CVSS 5.0) vulnerability affecting moin, moinmoin (moinmoin).
- Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.7% of all vulnerabilities.
- Fix: update to 1.5.8 or later.
| Package | Affected versions | Patched versions |
|---|
| moin PyPI | ≥ 1.5.7, < 1.5.8
| 1.5.8
|
| moinmoin | = 1.5.7
| No fix yet |
Description
An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "show_traceback=0" to their site configurations to disable debug tracebacks.
NVD description
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free