Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MoinMoin 路径遍历漏洞
Vulnerability Description
MoinMoin是一套开源的、可扩展的基于Python环境的wiki引擎程序。 MoinMoin 1.9.10版本及之前版本存在路径遍历漏洞,该漏洞源于action cache.py中的cache操作允许通过精心制作的HTTP请求遍历目录。可以将附件上传到wiki的攻击者可以使用它来实现远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A