CVE-2012-4404

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.9 through 1.9.4

Description The issue arises from improper handling of group names that contain virtual group names, such as "All," "Known," or "Trusted," in the security/ init .py module. This allows remote authenticated users with virtual group membership to be treated as a member of the group.

Recommendations For MoinMoin versions 1.9 through 1.9.4, consider restricting access to the security/ init .py module until a patch is available. As a temporary workaround, avoid using virtual group names such as "All," "Known," or "Trusted" in group names to minimize the risk of exploitation.