| Package | Affected versions | Patched versions |
|---|---|---|
| moin | ≥ 1.9, < 1.9.5 | 1.9.5 |
| moinmoin | = 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4 |
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free