High severityNVD Advisory· Published Nov 10, 2020· Updated Aug 4, 2024
CVE-2020-25074
CVE-2020-25074
Description
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
moinPyPI | < 1.9.11 | 1.9.11 |
Affected products
4- MoinMoin/MoinMoindescription
- ghsa-coords3 versionspkg:pypi/moinpkg:rpm/opensuse/moinmoin-wiki&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/moinmoin-wiki&distro=SUSE%20Package%20Hub%2015%20SP2
< 1.9.11+ 2 more
- (no CPE)range: < 1.9.11
- (no CPE)range: < 1.9.11-lp152.3.3.1
- (no CPE)range: < 1.9.11-bp152.4.3.1
Patches
Vulnerability mechanics
References
9- github.com/advisories/GHSA-52q8-877j-gghqghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-25074ghsaADVISORY
- www.debian.org/security/2020/dsa-4787ghsavendor-advisoryx_refsource_DEBIANWEB
- moinmo.in/SecurityFixesghsax_refsource_MISCWEB
- github.com/moinwiki/moin-1.9/commit/6b96a9060069302996b5af47fd4a388fc80172b7ghsaWEB
- github.com/moinwiki/moin-1.9/security/advisories/GHSA-52q8-877j-gghqghsax_refsource_MISCWEB
- github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2020-67.yamlghsaWEB
- lists.debian.org/debian-lts-announce/2020/11/msg00020.htmlghsamailing-listx_refsource_MLISTWEB
- pypi.org/project/moinghsaWEB
News mentions
0No linked articles in our index yet.