Lucene search

K
osvGoogleOSV:PYSEC-2013-5
HistoryJan 03, 2013 - 1:55 a.m.

PYSEC-2013-5

2013-01-0301:55:00
Google
osv.dev
11

0.007 Low

EPSS

Percentile

79.8%

Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a … (dot dot) in a file name.

CPENameOperatorVersion
moineq1.9.4
moineq1.9.5
moineq1.9.3