{"action":"Upgrade moin to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"0"},{"fixed":"1.7.1","introduced":"1.7"}],"component":"moin","cve_ids":["CVE-2008-1937"],"ecosystem":"PyPI","epss":0.0167,"exploited":false,"fixed_versions":["1.6.3","1.7.1"],"ghsa_id":"GHSA-rqxp-6926-hphr","id":"tcs_01M5KG542BH279NBPCBFKENE7A","modified_at":"2026-07-02T10:30:22.536277356Z","published_at":"2008-04-25T06:05:00Z","references":["https://osv.dev/vulnerability/PYSEC-2008-12","http://hg.moinmo.in/moin/1.6/rev/f405012e67af","http://moinmo.in/SecurityFixes","http://www.securityfocus.com/bid/28869","http://secunia.com/advisories/29894","http://security.gentoo.org/glsa/glsa-200805-09.xml","http://secunia.com/advisories/30160","http://www.vupen.com/english/advisories/2008/1307/references","https://exchange.xforce.ibmcloud.com/vulnerabilities/41909","https://github.com/advisories/GHSA-rqxp-6926-hphr"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2008-12","url":"https://osv.dev/vulnerability/PYSEC-2008-12"}],"summary":"The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges."}