Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/34791?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34791?format=api", "vulnerability_id": "VCID-4q2t-yhg6-k3dg", "summary": "Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012.", "aliases": [ { "alias": "CVE-2012-6081" }, { "alias": "GHSA-m2c4-jgmm-fvq3" }, { "alias": "PYSEC-2013-6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/7494?format=api", "purl": "pkg:pypi/moin@1.9.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.6" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/6975?format=api", "purl": "pkg:pypi/moin@1.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3fgh-8nmt-2fgp" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-551s-jjxy-qfer" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qcmp-zvgm-8bcm" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/6976?format=api", "purl": "pkg:pypi/moin@1.8.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3fgh-8nmt-2fgp" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-551s-jjxy-qfer" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qcmp-zvgm-8bcm" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/6977?format=api", "purl": "pkg:pypi/moin@1.8.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3fgh-8nmt-2fgp" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-551s-jjxy-qfer" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qcmp-zvgm-8bcm" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/6978?format=api", "purl": "pkg:pypi/moin@1.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/6973?format=api", "purl": "pkg:pypi/moin@1.9.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3fgh-8nmt-2fgp" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-551s-jjxy-qfer" }, { "vulnerability": "VCID-5dkr-jfqu-4kfq" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-faws-7xxv-eudq" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qgm9-pnrw-p3ak" }, { "vulnerability": "VCID-tkp3-e758-suhx" }, { "vulnerability": "VCID-xz41-zzdr-6ycb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/6974?format=api", "purl": "pkg:pypi/moin@1.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3fgh-8nmt-2fgp" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-551s-jjxy-qfer" }, { "vulnerability": "VCID-5dkr-jfqu-4kfq" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qgm9-pnrw-p3ak" }, { "vulnerability": "VCID-tkp3-e758-suhx" }, { "vulnerability": "VCID-xz41-zzdr-6ycb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/6979?format=api", "purl": "pkg:pypi/moin@1.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-5dkr-jfqu-4kfq" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-8xsp-chsd-cfhp" }, { "vulnerability": "VCID-9ck2-p7hx-4qex" }, { "vulnerability": "VCID-aduk-vjjh-c3gc" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qgm9-pnrw-p3ak" }, { "vulnerability": "VCID-tkp3-e758-suhx" }, { "vulnerability": "VCID-xz41-zzdr-6ycb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/6981?format=api", "purl": "pkg:pypi/moin@1.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-h1wf-35g5-5ucz" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qgm9-pnrw-p3ak" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/7396?format=api", "purl": "pkg:pypi/moin@1.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-h1wf-35g5-5ucz" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-qgm9-pnrw-p3ak" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/7397?format=api", "purl": "pkg:pypi/moin@1.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fak-dar5-tuet" }, { "vulnerability": "VCID-1kv8-4wn6-yydy" }, { "vulnerability": "VCID-2yaq-3m4p-q3bu" }, { "vulnerability": "VCID-3z75-azrr-2qac" }, { "vulnerability": "VCID-4fn8-ab2r-23dk" }, { "vulnerability": "VCID-4q2t-yhg6-k3dg" }, { "vulnerability": "VCID-5hn2-1bvq-jfdh" }, { "vulnerability": "VCID-h1wf-35g5-5ucz" }, { "vulnerability": "VCID-kjqq-u9hy-5yda" }, { "vulnerability": "VCID-tkp3-e758-suhx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.5" } ], "references": [ { "reference_url": "http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f", "reference_id": "", "reference_type": "", "scores": [], "url": "http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f" }, { "reference_url": "http://moinmo.in/MoinMoinRelease1.9", "reference_id": "", "reference_type": "", "scores": [], "url": "http://moinmo.in/MoinMoinRelease1.9" }, { "reference_url": "http://moinmo.in/SecurityFixes", "reference_id": "", "reference_type": "", "scores": [], "url": "http://moinmo.in/SecurityFixes" }, { "reference_url": "https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599" }, { "reference_url": "http://secunia.com/advisories/51663", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/51663" }, { "reference_url": "http://secunia.com/advisories/51676", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/51676" }, { "reference_url": "http://secunia.com/advisories/51696", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/51696" }, { "reference_url": "https://github.com/moinwiki/moin", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moinwiki/moin" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2013-6.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2013-6.yaml" }, { "reference_url": "https://web.archive.org/web/20200228165146/http://www.securityfocus.com/bid/57082", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20200228165146/http://www.securityfocus.com/bid/57082" }, { "reference_url": "http://ubuntu.com/usn/usn-1680-1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://ubuntu.com/usn/usn-1680-1" }, { "reference_url": "http://www.debian.org/security/2012/dsa-2593", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2012/dsa-2593" }, { "reference_url": "http://www.exploit-db.com/exploits/25304", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.exploit-db.com/exploits/25304" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/12/29/6", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2012/12/29/6" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/12/30/4", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2012/12/30/4" }, { "reference_url": "http://www.securityfocus.com/bid/57082", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/57082" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6081", "reference_id": "CVE-2012-6081", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6081" }, { "reference_url": "https://github.com/advisories/GHSA-m2c4-jgmm-fvq3", "reference_id": "GHSA-m2c4-jgmm-fvq3", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-m2c4-jgmm-fvq3" } ], "weaknesses": [ { "cwe_id": 434, "name": "Unrestricted Upload of File with Dangerous Type", "description": "The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4q2t-yhg6-k3dg" }