PYSEC-2009-11

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2009-11.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2009-11
Aliases
Published
2009-03-30T01:30:00Z
Modified
2025-10-09T05:15:58.251194Z
Summary
[none]
Details

The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.

References

Affected packages

PyPI / moin

Package

Name
moin
View open source insights on deps.dev
Purl
pkg:pypi/moin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.8.4
1.8.5
1.8.6
1.8.7
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
1.9.6
1.9.7
1.9.8
1.9.9
1.9.10
1.9.11
2.*
2.0.0a1
2.0.0b1
2.0.0b2
2.0.0b3

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2009-11.yaml"