Lucene search

K
osvGoogleOSV:GHSA-876C-QMCF-CXV6
HistoryMay 02, 2022 - 6:14 a.m.

MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

2022-05-0206:14:38
Google
osv.dev
5
moinmoin
vulnerability
gateway_interface

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

71.7%

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

71.7%