Skip to content
Medium Published: Mar 30, 2009 Modified: Apr 09, 2025

CVE-2008-6548

5 CVSS Score Medium
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Export CVE-2008-6548 Data:
Share:
Link copied!

Description

The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.

CVSS Vector Details

Attack Vector Network
Attack Complexity Low
Confidentiality P
Integrity None
Availability None

Affected Software Configurations

  • a moinmo moinmoin 1.6.1 * * * * * * *

Weaknesses (CWE)

  • CWE-862

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2005-3623 CVSS 0 Same weakness: CWE-862 CVE-2006-4483 CVSS 0 Same weakness: CWE-862 CVE-2009-2282 CVSS 0 Same weakness: CWE-862 CVE-2009-3168 CVSS 7.2 Same weakness: CWE-862 CVE-2009-3781 CVSS 0 Same weakness: CWE-862

CVE History Timeline

Mar 30, 2009 14:45 Initial Analysis
Feb 02, 2024 02:17 Reanalysis
May 14, 2024 02:01 CVE Modified
Nov 21, 2024 00:56 CVE Modified
← Back to CVE Tracker