PT-2013-1959

CVE-2012-6495

Published

2013-01-03

Updated

2022-05-17

Description by

CVSS 2.0

6.0

Medium

MetricsAV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MoinMoin versions prior to 1.9.6

Description The issue allows remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. This can potentially be leveraged to execute arbitrary code.

Recommendations For versions prior to 1.9.6, update to version 1.9.6 or later to resolve the issue. As a temporary workaround, consider restricting write permissions to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Jamie Strandboge

Jdstrand

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers