CVE-2008-6548

The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.

🔗 References (6)

• cve@mitrehttp://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546
• cve@mitrehttp://moinmo.in/SecurityFixes
• cve@mitrehttp://osvdb.org/48877
• af854a3a-2127-422b-91ae-364da2661108http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546
• af854a3a-2127-422b-91ae-364da2661108http://moinmo.in/SecurityFixes
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/48877