{"action":"Upgrade moin to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"0"},{"fixed":"1.7.1","introduced":"1.7"}],"component":"moin","cve_ids":["CVE-2008-6603"],"ecosystem":"PyPI","epss":0.01651,"exploited":false,"fixed_versions":["1.6.3","1.7.1"],"ghsa_id":"GHSA-wc8w-gh5m-62fv","id":"tcs_01M5KG1YMJE54CYYK9J1J8YRT3","modified_at":"2024-11-26T18:22:36Z","published_at":"2022-05-17T02:10:54Z","references":["https://osv.dev/vulnerability/GHSA-wc8w-gh5m-62fv","https://nvd.nist.gov/vuln/detail/CVE-2008-6603","https://exchange.xforce.ibmcloud.com/vulnerabilities/41911","https://github.com/moinwiki/moin","https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2009-13.yaml","https://web.archive.org/web/20080511110948/http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26","https://web.archive.org/web/20090730023652/http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter","https://web.archive.org/web/20200301063229/http://www.securityfocus.com/bid/34655","https://web.archive.org/web/20211207023130/http://hg.moinmo.in/moin/1.7/rev/88356b3f849a","http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26","http://hg.moinmo.in/moin/1.7/rev/88356b3f849a","http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter","http://moinmo.in/SecurityFixes","http://osvdb.org/48875","http://www.securityfocus.com/bid/34655","http://www.vupen.com/english/advisories/2008/1307"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wc8w-gh5m-62fv","url":"https://osv.dev/vulnerability/GHSA-wc8w-gh5m-62fv"}],"summary":"MoinMoin Access Restrictions Bypassed due to improper ACL enforcement"}