Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-qcmp-zvgm-8bcm |
| Summary | The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors. |
| Aliases |
| 0 |
|
| 1 |
| alias |
GHSA-5jjr-gmq3-f986 |
|
| 2 |
|
|
| Fixed_packages |
| 0 |
| url |
pkg:pypi/moin@1.8.7 |
| purl |
pkg:pypi/moin@1.8.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 4 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 5 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 6 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 7 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 8 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 9 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 10 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 11 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.7 |
|
|
| Affected_packages |
| 0 |
| url |
pkg:pypi/moin@1.8.4 |
| purl |
pkg:pypi/moin@1.8.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 9 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 10 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 11 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 12 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 13 |
| vulnerability |
VCID-qcmp-zvgm-8bcm |
|
| 14 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.4 |
|
| 1 |
| url |
pkg:pypi/moin@1.8.5 |
| purl |
pkg:pypi/moin@1.8.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 9 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 10 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 11 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 12 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 13 |
| vulnerability |
VCID-qcmp-zvgm-8bcm |
|
| 14 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.5 |
|
| 2 |
| url |
pkg:pypi/moin@1.8.6 |
| purl |
pkg:pypi/moin@1.8.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 9 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 10 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 11 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 12 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 13 |
| vulnerability |
VCID-qcmp-zvgm-8bcm |
|
| 14 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.6 |
|
|
| References |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| Weaknesses |
| 0 |
| cwe_id |
937 |
| name |
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013. |
|
| 1 |
| cwe_id |
1035 |
| name |
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017. |
|
|
| Exploits |
|
| Severity_range_score | null |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-qcmp-zvgm-8bcm |