{"action":"Upgrade moin to 1.8.7 or later.","affected":[{"fixed":"1.8.7","introduced":"1.5"},{"fixed":"1.9.2","introduced":"1.9"}],"component":"moin","cve_ids":["CVE-2010-0668"],"ecosystem":"PyPI","epss":0.02191,"exploited":false,"fixed_versions":["1.8.7","1.9.2"],"ghsa_id":"GHSA-574f-mh6m-c6qm","id":"tcs_01M5KF07CY45367DYJR4GH8N64","modified_at":"2024-12-06T05:30:42.818286Z","published_at":"2022-05-02T06:14:39Z","references":["https://osv.dev/vulnerability/GHSA-574f-mh6m-c6qm","https://nvd.nist.gov/vuln/detail/CVE-2010-0668","https://bugzilla.redhat.com/show_bug.cgi?id=565604","https://exchange.xforce.ibmcloud.com/vulnerabilities/56002","https://github.com/moinwiki/moin","https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-15.yaml","https://web.archive.org/web/20111225112846/http://secunia.com/advisories/38903","https://web.archive.org/web/20140725192956/http://secunia.com/advisories/38709","https://web.archive.org/web/20140806190238/http://secunia.com/advisories/38444","https://web.archive.org/web/20200228174758/http://www.securityfocus.com/bid/38023","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975","http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES","http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035374.html","http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035438.html","http://marc.info/?l=oss-security&m=126625972814888&w=2","http://marc.info/?l=oss-security&m=126676896601156&w=2","http://moinmo.in/MoinMoinRelease1.8","http://moinmo.in/SecurityFixes","http://www.debian.org/security/2010/dsa-2014","http://www.openwall.com/lists/oss-security/2010/02/15/2"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-574f-mh6m-c6qm","url":"https://osv.dev/vulnerability/GHSA-574f-mh6m-c6qm"}],"summary":"MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration"}