Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-4404
HistorySep 10, 2012 - 10:55 p.m.

CVE-2012-4404

2012-09-1022:55:00
Debian Security Bug Tracker
security-tracker.debian.org
8

0.004 Low

EPSS

Percentile

74.7%

security/init.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as “All,” “Known,” or “Trusted,” which allows remote authenticated users with virtual group membership to be treated as a member of the group.

OSVersionArchitecturePackageVersionFilename
Debian10allmoin< 1.9.4-8moin_1.9.4-8_all.deb