Lucene search

K
cve[email protected]CVE-2010-1238
HistoryApr 05, 2010 - 3:30 p.m.

CVE-2010-1238

2010-04-0515:30:01
CWE-264
web.nvd.nist.gov
35
cve-2010-1238
moinmoin
textcha
bypass
vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values.

Affected configurations

NVD
Node
moinmomoinmoinMatch1.7.1
CPENameOperatorVersion
moinmo:moinmoinmoinmo moinmoineq1.7.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%