CVE-2010-0667: MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

May 2, 2022 (updated September 30, 2024)

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

github.com/advisories/GHSA-876c-qmcf-cxv6
github.com/moinwiki/moin
github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-14.yaml
nvd.nist.gov/vuln/detail/CVE-2010-0667

Code Behaviors & Features

Detect and mitigate CVE-2010-0667 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →