CVE-2020-25074

Katalog CVE

CVSS 9.8 · Critical EPSS 6,6%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada moinmoin, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.

Rincian

Terbit di NVD

10 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

6,6% peluang dieksploitasi; lebih tinggi dari 93,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://moinmo.in/SecurityFixes advisory pihak ketiga
• https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-52q8-877j-gghq advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/11/msg00020.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4787 advisory pihak ketiga