CVE-2007-0902: Medium severity MoinMoin MoinMoin vulnerability
An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "showtraceback=0" to their site configurations to disable debug tracebacks.
Other sources
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0902?
CVE-2007-0902 is considered a moderate severity vulnerability due to its potential for information leakage.
How do I fix CVE-2007-0902?
To fix CVE-2007-0902, upgrade your MoinMoin installation from version 1.5.7 to 1.5.8 or higher.
What software versions are affected by CVE-2007-0902?
CVE-2007-0902 affects MoinMoin version 1.5.7.
Can I disable the feature causing the information leak in CVE-2007-0902?
Yes, you can disable the debug tracebacks by adding 'show_traceback=0' to the MoinMoin site configuration.
Is CVE-2007-0902 an ongoing vulnerability?
CVE-2007-0902 is not an ongoing vulnerability but rather a historical one that has been addressed in later software updates.