mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish GHSA-876c-qmcf-cxv6
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-876c-qmcf-cxv6",
|
||||
"modified": "2024-04-01T19:18:30Z",
|
||||
"modified": "2024-09-30T20:50:03Z",
|
||||
"published": "2022-05-02T06:14:38Z",
|
||||
"aliases": [
|
||||
"CVE-2010-0667"
|
||||
@@ -9,7 +9,14 @@
|
||||
"summary": "MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set",
|
||||
"details": "MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the `GATEWAY_INTERFACE` environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.",
|
||||
"severity": [
|
||||
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
},
|
||||
{
|
||||
"type": "CVSS_V4",
|
||||
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
@@ -37,6 +44,14 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0667"
|
||||
},
|
||||
{
|
||||
"type": "PACKAGE",
|
||||
"url": "https://github.com/moinwiki/moin"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-14.yaml"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES"
|
||||
@@ -65,10 +80,6 @@
|
||||
"type": "WEB",
|
||||
"url": "http://moinmo.in/SecurityFixes"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://secunia.com/advisories/38242"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2010/01/21/6"
|
||||
@@ -82,7 +93,7 @@
|
||||
"cwe_ids": [
|
||||
"CWE-200"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2024-04-01T19:18:30Z",
|
||||
"nvd_published_at": "2010-02-26T19:30:00Z"
|
||||
|
||||
Reference in New Issue
Block a user