What is GHSA-cmg7-xr2j-4r9v?

GHSA-cmg7-xr2j-4r9v is a security advisory published by GitHub Security Advisories with Medium severity. MoinMoin Improper ACL handling for calendars and includes

Which CVE IDs does GHSA-cmg7-xr2j-4r9v cover?

GHSA-cmg7-xr2j-4r9v covers the following CVE IDs: CVE-2007-2637. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-cmg7-xr2j-4r9v?

GHSA-cmg7-xr2j-4r9v affects 1 product, including: pip/moin:\u003c 1.5.8.

GHSA-cmg7-xr2j-4r9vMedium

MoinMoin Improper ACL handling for calendars and includes

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

May 14, 2024

🔗 CVE IDs covered (1)

CVE-2007-2637 →

📋 Description

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

🎯 Affected products1

pip/moin:< 1.5.8

🔗 References (9)

https://nvd.nist.gov/vuln/detail/CVE-2007-2637
https://exchange.xforce.ibmcloud.com/vulnerabilities/34474
http://osvdb.org/36269
http://secunia.com/advisories/25208
http://secunia.com/advisories/29262
http://www.debian.org/security/2008/dsa-1514
http://www.ubuntu.com/usn/usn-458-1
https://moinmo.in/MoinMoinRelease1.5/CHANGES
https://github.com/advisories/GHSA-cmg7-xr2j-4r9v