| Package | Affected versions | Patched versions |
|---|---|---|
| moin | < 1.8.7 | 1.8.7 |
| moinmoin | = 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.5a= 1.5.6= 1.5.7= 1.5.8= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.8.0= 1.8.1= 1.8.2= 1.8.3= 1.8.4≤ 1.8.6 |
The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free