High severityNVD Advisory· Published Jul 27, 2004· Updated Jun 16, 2026

CVE-2004-0708

Description

MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
MoinPyPI	< 1.2.2	1.2.2

Affected products

Moinmo/Moinmoin4 versions
cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.2.1
ghsa-coords
pkg:pypi/moin
Range: < 1.2.2

Patches

Vulnerability mechanics

References

www.gentoo.org/security/en/glsa/glsa-200407-09.xmlnvdPatchVendor AdvisoryWEB
www.securityfocus.com/bid/10568nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-7jrp-r6jx-32cwghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2004-0708ghsaADVISORY
secunia.com/advisories/11807nvdWEB
sourceforge.net/tracker/index.phpnvdWEB
www.osvdb.org/6704nvdWEB
exchange.xforce.ibmcloud.com/vulnerabilities/16465nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000