Описание
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| moin | fixed | 1.6.2-1 | package |
EPSS
Процентиль: 46%
0.00228
Низкий
Связанные уязвимости
ubuntu
больше 16 лет назад
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
nvd
больше 16 лет назад
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
CVSS3: 5.3
github
больше 3 лет назад
MoinMoin improper access control on the included page for the rst parser
EPSS
Процентиль: 46%
0.00228
Низкий