In short
- CVE-2008-1099 is a MEDIUM (CVSS 5.0) vulnerability affecting moin, moinmoin (moinmoin).
- Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.0% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| moin PyPI | ≤ 1.5.8
| No fix yet |
| moinmoin | ≤ 1.5.8
| No fix yet |
Description
_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.
NVD description
_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free