En bref
- CVE-2007-0902 est une vulnérabilité MOYENNE (CVSS 5.0) touchant moin, moinmoin (moinmoin).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.4%, plus élevée que 71.7% des vulnérabilités.
- Correctif : mettre à jour vers 1.5.8 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| moin PyPI | ≥ 1.5.7, < 1.5.8
| 1.5.8
|
| moinmoin | = 1.5.7
| No fix yet |
Description
An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "show_traceback=0" to their site configurations to disable debug tracebacks.
NVD description
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free