MoinMoin vulnerable to remote code execution via cache action

Impact The cache action in action/cache.py allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution. Patches Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the...

GHSA-52Q8-877J-GGHQ MoinMoin vulnerable to remote code execution via cache action

Impact The cache action in action/cache.py allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution. Patches Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the...

Ubuntu 16.04 LTS / 18.04 LTS : MoinMoin vulnerabilities (USN-4629-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4629-1 advisory. Michael Chapman discovered that MoinMoin incorrectly handled certain cache actions. An attacker could possibly use this issue to execute...