{"action":"Upgrade moin to 1.9.11 or later.","affected":[{"fixed":"1.9.11","introduced":"0"}],"component":"moin","cve_ids":["CVE-2020-25074"],"ecosystem":"PyPI","epss":0.06551,"exploited":false,"fixed_versions":["1.9.11"],"ghsa_id":"GHSA-52q8-877j-gghq","id":"tcs_01M5KGAT1VZR1S30BM4DN1NT3Q","modified_at":"2023-11-08T04:03:09.606103Z","published_at":"2020-11-10T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-67","https://www.debian.org/security/2020/dsa-4787","https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-52q8-877j-gghq","http://moinmo.in/SecurityFixes","https://lists.debian.org/debian-lts-announce/2020/11/msg00020.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-67","url":"https://osv.dev/vulnerability/PYSEC-2020-67"}],"summary":"The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve rem"}