Description
MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values.
References
- DSA-2024 vendor-advisory
- 39284 third-party-advisory
- ADV-2010-0831 vdb-entry
- USN-925-1 vendor-advisory