p PatchFirst

CVE-2008-6603

CVE-2008-6603

This page contains facts from public vulnerability sources. Check the original advisory before updating.

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

CVSS 8.7 · High · EPSS 1.7% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • moin PyPI

    Affected ranges
    • ECOSYSTEM: < 1.6.3

    Update to 1.6.3

  • moin PyPI

    Versions
    • 1.7
    Affected ranges
    • ECOSYSTEM: ≥ 1.7, < 1.7.1

    Update to 1.7.1

  • moin PyPI

    Affected ranges
    • ECOSYSTEM: < 1.6.3 ∪ ≥ 1.7, < 1.7.1

    Update to 1.6.3; Update to 1.7.1

Original sources

Check your server →