Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-CMG7-XR2J-4R9V
HistoryMay 01, 2022 - 6:05 p.m.

MoinMoin Improper ACL handling for calendars and includes

2022-05-0118:05:39
GitHub Advisory Database
github.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.6%

JSON

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Affected configurations

Vulners
Node
moinRange<1.5.8
CPENameOperatorVersion
moinlt1.5.8

Related

ubuntucve 1
debiancve 1
cve 1
prion 1
cvelist 1
nvd 1
ubuntu 1
openvas 3
nessus 2
debian 1
osv 1
securityvulns 1
ubuntucve
ubuntucve
CVE-2007-2637
2007-05-13 00:00:00
debiancve
debiancve
CVE-2007-2637
2007-05-13 23:19:00
cve
cve
CVE-2007-2637
2007-05-13 23:19:00
prion
prion
Design/Logic Flaw
2007-05-13 23:19:00
cvelist
cvelist
CVE-2007-2637
2007-05-13 23:00:00
nvd
nvd
CVE-2007-2637
2007-05-13 23:19:00
ubuntu
ubuntu
MoinMoin vulnerabilities
2007-05-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-458-1)
2009-03-23 00:00:00
Debian Security Advisory DSA 1514-1 (moin)
2008-03-11 00:00:00
Debian: Security Advisory (DSA-1514-1)
2008-03-11 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : moin vulnerabilities (USN-458-1)
2007-11-10 00:00:00
Debian DSA-1514-1 : moin - several vulnerabilities
2008-03-13 00:00:00
debian
debian
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-09 14:39:08
osv
osv
moin
2008-03-09 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-10 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.6%

JSON
Related for GHSA-CMG7-XR2J-4R9V
ubuntucve1debiancve1cve1prion1cvelist1nvd1ubuntu1openvas3nessus2debian1osv1securityvulns1