Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

MoinMoin Remote File Overwrite Risk via Authenticated Attack

CVE-2012-6495 · published 13 years ago
Summary

MoinMoin versions before 1.9.6 have a security flaw that allows hackers with login access to overwrite important system files, which can lead to data loss or even allow hackers to take control of the system. This is a concern for MoinMoin administrators, especially those who allow user registration or have users with elevated permissions. To protect your system, update to version 1.9.6 or later.

What to do
  • Update juergen hermann et al. moin to version 1.9.6.
Affected software
Ecosystem VendorProductAffected versions
pip juergen hermann et al. moin < 1.9.6
Fix: upgrade to 1.9.6
– moinmo moinmoin <= 1.9.5
0.1
0.2
0.3
0.4
0.5
0.6
0.7
0.8
0.9
0.11
1.0
45 more version ranges
cpe:2.3:a:moinmo:moinmoin:*:*:*:*:*:*:*:*
Original advisory text
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users...
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged with CVE-2012-6081 to execute arbitrary code.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
19% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published3 Jan 2013
Updated15 Oct 2026
First seen6 Mar 2026
Sources
GHSA-6gx4-29v9-g9q5 · GHSA
CVE-2012-6495 · NVD
Track software like this
Free during beta