p PatchFirst

CVE-2008-1937

CVE-2008-1937

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.

CVSS 8.7 · High · EPSS 1.7% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • moin PyPI

    Affected ranges
    • ECOSYSTEM: < 1.6.3

    Update to 1.6.3

  • moin PyPI

    Versions
    • 1.7
    Affected ranges
    • ECOSYSTEM: < 1.6.3 ∪ ≥ 1.7, < 1.7.1

    Update to 1.6.3; Update to 1.7.1

Original sources

Check your server →