Publish GHSA-876c-qmcf-cxv6

This commit is contained in:
advisory-database[bot]
2024-09-30 20:51:29 +00:00
parent ba5e506c50
commit c125b8a04d
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-876c-qmcf-cxv6",
"modified": "2024-04-01T19:18:30Z",
"modified": "2024-09-30T20:50:03Z",
"published": "2022-05-02T06:14:38Z",
"aliases": [
"CVE-2010-0667"
@@ -9,7 +9,14 @@
"summary": "MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set",
"details": "MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the `GATEWAY_INTERFACE` environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -37,6 +44,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0667"
},
{
"type": "PACKAGE",
"url": "https://github.com/moinwiki/moin"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-14.yaml"
},
{
"type": "WEB",
"url": "http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES"
@@ -65,10 +80,6 @@
"type": "WEB",
"url": "http://moinmo.in/SecurityFixes"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/38242"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2010/01/21/6"
@@ -82,7 +93,7 @@
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-04-01T19:18:30Z",
"nvd_published_at": "2010-02-26T19:30:00Z"