Unscored severity · published Mar 29, 2010
CVE-2009-4762
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers…
–
CVSS
3.1%
EPSS
No
On KEV
Description
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Moinmoin · Moinmo
1.7.0; 1.7.1; 1.7.2; 1.8.0; 1.8.1; 1.8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4762
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4762
moinmo.in
http://moinmo.in/SecurityFixes
secunia.com
http://secunia.com/advisories/39887
www.debian.org
http://www.debian.org/security/2010/dsa-2014
www.vupen.com
http://www.vupen.com/english/advisories/2010/0600
www.vupen.com
http://www.vupen.com/english/advisories/2010/1208
hg.moinmo.in
http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2
More from Moinmoin
9.8
CVE-2020-25074
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request
6.1
CVE-2017-5934
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via…
6.1
CVE-2016-9119
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified…
6.1
CVE-2016-7148
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting…
6.1
CVE-2016-7146
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)"…