Kurz gesagt
- CVE-2007-0902 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in moin, moinmoin (moinmoin).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.4%, höher als bei 71.7% aller Schwachstellen.
- Abhilfe: auf 1.5.8 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| moin PyPI | ≥ 1.5.7, < 1.5.8
| 1.5.8
|
| moinmoin | = 1.5.7
| No fix yet |
Description
An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "show_traceback=0" to their site configurations to disable debug tracebacks.
NVD description
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free