What is GHSA-rqxp-6926-hphr?

GHSA-rqxp-6926-hphr is a security advisory published by GitHub Security Advisories with High severity. MoinMoin vulnerable to privilege escalation

Which CVE IDs does GHSA-rqxp-6926-hphr cover?

GHSA-rqxp-6926-hphr covers the following CVE IDs: CVE-2008-1937. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rqxp-6926-hphr?

GHSA-rqxp-6926-hphr has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-rqxp-6926-hphr?

GHSA-rqxp-6926-hphr affects 1 product, including: pip/moin:\u003c 1.6.3.

GHSA-rqxp-6926-hphrHighCVSS 7.5

MoinMoin vulnerable to privilege escalation

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

November 26, 2024

🔗 CVE IDs covered (1)

CVE-2008-1937 →

📋 Description

The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.

🎯 Affected products1

pip/moin:< 1.6.3

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2008-1937
https://exchange.xforce.ibmcloud.com/vulnerabilities/41909
http://moinmo.in/SecurityFixes
http://security.gentoo.org/glsa/glsa-200805-09.xml
https://web.archive.org/web/20080628213526/http://secunia.com/advisories/29894
https://web.archive.org/web/20080724211750/http://www.securityfocus.com/bid/28869
https://web.archive.org/web/20081002145815/http://hg.moinmo.in/moin/1.6/rev/f405012e67af
https://web.archive.org/web/20081007072837/http://secunia.com/advisories/30160
https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2008-12.yaml
https://github.com/advisories/GHSA-rqxp-6926-hphr