CVE-2008-1099: MoinMoin Improper Access Control

May 1, 2022 (updated May 14, 2024)

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.

References

exchange.xforce.ibmcloud.com/vulnerabilities/41038
github.com/advisories/GHSA-jj2f-57jg-5rm6
nvd.nist.gov/vuln/detail/CVE-2008-1099
usn.ubuntu.com/716-1
www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html
www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html

Code Behaviors & Features

Detect and mitigate CVE-2008-1099 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →