Advisory details:
pypa / moin/PYSEC-2013-7
| Advisory ID | pypa/moin/PYSEC-2013-7 |
| Aliases |
CVE-2012-6495
GHSA-6gx4-29v9-g9q5 PYSEC-2013-7 |
| Summary | Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged with CVE-2012-6081 to execute arbitrary code. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| There are no known severity scores. | ||
| Data source | Exploit-DB |
|---|---|
| Date added | June 24, 2013 |
| Description | MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit) |
| Ransomware campaign use | Known |
| Source publication date | June 24, 2013 |
| Exploit type | remote |
| Platform | linux |
| Source update date | June 24, 2013 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.