Description
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | moin | < 1.6.2 | 1.6.2 | GHSA-jhxw-4hw4-mhh7 |
| PyPI | moin | all versions | — | PYSEC-2009-11 |