CVE-2012-4404
moinmo moinmoin: no CVSS score yet. EPSS 2.1% chance of exploitation in the next 30 days. Fixed in moin 1.9.5.
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group.
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moinmo:moinmoin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-g4mx-rm5q-vh24 | PyPI | moin | >=1.9 <1.9.5 | 1.9.5 |
| PYSEC-2012-10 | PyPI | moin | >=1.9 <1.9.5 | 1.9.5 |