CVE-2012-6080 MoinMoin Directory Traversal vulnerability
MediumCVSS 6.4
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi moin(PyPI) | >= 1.9.3, < 1.9.6 | 1.9.6 |
| pypi moin(PyPI) | = 1.9.3 | No fix listed |
| pypi moin(PyPI) | = 1.9.4 | No fix listed |
| pypi moin(PyPI) | = 1.9.5 | No fix listed |
| moinmoin | = 1.9.3 | No fix listed |
| moinmoin | = 1.9.4 | No fix listed |
| moinmoin | = 1.9.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.launchpad.net
- github.com product
- github.com
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- hg.moinmo.in patch
- moinmo.in vendor-advisory
- USN-1680-1 vendor-advisory
- DSA-2593 vendor-advisory
- [oss-security] 20121229 Re: CVE request: MoinMoin Wiki (path traversal vulnerability) mailing-list
- 51663 third-party-advisory vendor-advisory
- 51696 third-party-advisory vendor-advisory
- 57076 vdb-entry
- 51676 third-party-advisory vendor-advisory
- github.com vendor-advisory