| Package | Affected versions | Patched versions |
|---|---|---|
| moin | ≥ 1.9, < 1.9.1 | 1.9.1 |
| moinmoin | = 1.9.0 |
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free