CVE-2008-6548
moinmo moinmoin: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in moin 1.6.2.
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-862
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moinmo:moinmoin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jhxw-4hw4-mhh7 | PyPI | moin | <1.6.2 | 1.6.2 |
| PYSEC-2009-11 | PyPI | moin | all versions | no fix published |