{"action":"Upgrade moin to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"0"},{"fixed":"1.7.1","introduced":"1.7"}],"component":"moin","cve_ids":["CVE-2008-6603"],"ecosystem":"PyPI","epss":0.01651,"exploited":false,"fixed_versions":["1.6.3","1.7.1"],"ghsa_id":"GHSA-wc8w-gh5m-62fv","id":"tcs_01M5KG56M3W2TZB3C2DX5KE6Q4","modified_at":"2026-07-02T13:00:04.982060320Z","published_at":"2009-04-03T18:30:00Z","references":["https://osv.dev/vulnerability/PYSEC-2009-13","http://osvdb.org/48875","http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26","http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter","http://www.vupen.com/english/advisories/2008/1307","http://hg.moinmo.in/moin/1.7/rev/88356b3f849a","http://moinmo.in/SecurityFixes","http://www.securityfocus.com/bid/34655","https://exchange.xforce.ibmcloud.com/vulnerabilities/41911"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2009-13","url":"https://osv.dev/vulnerability/PYSEC-2009-13"}],"summary":"MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability tha"}