Skip to content
OpenAdvisories
Medium DSA-2538-1 1 CVE

moin - privilege escalation

Published Sep 5, 2012 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 moin 1.9.3-1+squeeze2

Vulnerabilities 1

  • Medium 5.4

    MoinMoin Improper Access Control

    security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of t…