CVE-2012-6495: MoinMoin Multiple vulnerable to directory traversal

May 17, 2022 (updated September 26, 2024)

Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged with CVE-2012-6081 to execute arbitrary code.

References

bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599
github.com/advisories/GHSA-6gx4-29v9-g9q5
github.com/moinwiki/moin
github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2013-7.yaml
nvd.nist.gov/vuln/detail/CVE-2012-6495
web.archive.org/web/20151017045319/http://secunia.com/advisories/51696

Code Behaviors & Features

Detect and mitigate CVE-2012-6495 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →