GHSA-mxh8-xgq9-w782Medium
MoinMoin Insertion of Sensitive Information into Log File
🔗 CVE IDs covered (1)
📋 Description
An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "show_traceback=0" to their site configurations to disable debug tracebacks.
🎯 Affected products1
- pip/moin:= 1.5.7
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2007-0902
- http://osvdb.org/33173
- http://secunia.com/advisories/24138
- http://secunia.com/advisories/24244
- http://www.securityfocus.com/bid/22515
- http://www.ubuntu.com/usn/usn-423-1
- https://moinmo.in/MoinMoinRelease1.5/CHANGES
- https://github.com/advisories/GHSA-mxh8-xgq9-w782