CVE-2010-0668 MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration
MediumCVSS 6.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi moin(PyPI) | >= 1.5, < 1.8.7 | 1.8.7 |
| pypi moin(PyPI) | = 1.8.4 | No fix listed |
| pypi moin(PyPI) | = 1.8.5 | No fix listed |
| pypi moin(PyPI) | = 1.8.6 | No fix listed |
| pypi moin(PyPI) | >= 1.9, < 1.9.2 | 1.9.2 |
| pypi moin(PyPI) | = 1.9.0 | No fix listed |
| pypi moin(PyPI) | = 1.9.1 | No fix listed |
| pypi moin(PyPI) | >= 1.8, < 1.8.7 | 1.8.7 |
| moinmoin | = 1.5.0 | No fix listed |
| moinmoin | = 1.5.0-beta1 | No fix listed |
| moinmoin | = 1.5.0-beta2 | No fix listed |
| moinmoin | = 1.5.0-beta3 | No fix listed |
| moinmoin | = 1.5.0-beta4 | No fix listed |
| moinmoin | = 1.5.0-beta5 | No fix listed |
| moinmoin | = 1.5.0-beta6 | No fix listed |
| moinmoin | = 1.5.0-rc1 | No fix listed |
| moinmoin | = 1.5.1 | No fix listed |
| moinmoin | = 1.5.2 | No fix listed |
| moinmoin | = 1.5.3 | No fix listed |
| moinmoin | = 1.5.3-rc1 | No fix listed |
| moinmoin | = 1.5.3-rc2 | No fix listed |
| moinmoin | = 1.5.4 | No fix listed |
| moinmoin | = 1.5.5 | No fix listed |
| moinmoin | = 1.5.5-rc1 | No fix listed |
| moinmoin | = 1.5.5a | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| moinmoin | = 1.5.6 | No fix listed |
| moinmoin | = 1.5.7 | No fix listed |
| moinmoin | = 1.5.8 | No fix listed |
| moinmoin | = 1.6.0 | No fix listed |
| moinmoin | = 1.6.0-beta1 | No fix listed |
| moinmoin | = 1.6.0-beta2 | No fix listed |
| moinmoin | = 1.6.0-rc1 | No fix listed |
| moinmoin | = 1.6.0-rc2 | No fix listed |
| moinmoin | = 1.6.1 | No fix listed |
| moinmoin | = 1.6.2 | No fix listed |
| moinmoin | = 1.6.3 | No fix listed |
| moinmoin | = 1.6.4 | No fix listed |
| moinmoin | = 1.7.0 | No fix listed |
| moinmoin | = 1.7.0-beta1 | No fix listed |
| moinmoin | = 1.7.0-beta2 | No fix listed |
| moinmoin | = 1.7.0-rc1 | No fix listed |
| moinmoin | = 1.7.0-rc2 | No fix listed |
| moinmoin | = 1.7.0-rc3 | No fix listed |
| moinmoin | = 1.7.1 | No fix listed |
| moinmoin | = 1.7.2 | No fix listed |
| moinmoin | = 1.7.3 | No fix listed |
| moinmoin | = 1.8.0 | No fix listed |
| moinmoin | = 1.8.1 | No fix listed |
| moinmoin | = 1.8.2 | No fix listed |
| moinmoin | = 1.8.3 | No fix listed |
| moinmoin | = 1.8.4 | No fix listed |
| moinmoin | = 1.8.6 | No fix listed |
| moinmoin | = 1.9.0 | No fix listed |
| moinmoin | = 1.9.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking
- moinmoin-superuser-unspecified(56002) vdb-entry
- github.com product
- github.com
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- bugs.debian.org
- hg.moinmo.in
- FEDORA-2010-1743 vendor-advisory
- FEDORA-2010-1712 vendor-advisory
- [oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7 mailing-list
- [oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7 mailing-list
- moinmo.in
- moinmo.in vendor-advisory
- DSA-2014 vendor-advisory
- [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7 mailing-list
- 38023 patch vdb-entry
- 38709 third-party-advisory vendor-advisory
- 62043 vdb-entry
- ADV-2010-0266 vdb-entry vendor-advisory
- 38444 third-party-advisory vendor-advisory
- ADV-2010-0600 vdb-entry vendor-advisory
- 38903 third-party-advisory vendor-advisory
- github.com vendor-advisory