CVE-2008-0782: Path Traversal
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOINID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
Other sources
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOINID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been fixed on e69a16b6e630.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0782?
CVE-2008-0782 is classified as a high severity vulnerability due to the potential for remote attackers to exploit directory traversal to overwrite arbitrary files.
How do I fix CVE-2008-0782?
To fix CVE-2008-0782, upgrade MoinMoin to version 1.5.9 or later, which addresses this vulnerability.
What versions of MoinMoin are affected by CVE-2008-0782?
CVE-2008-0782 affects MoinMoin versions 1.5.8 and earlier, including various 0.x versions.
What types of attacks can be performed using CVE-2008-0782?
Attackers can leverage CVE-2008-0782 for directory traversal attacks, potentially leading to file overwriting and even PHP code execution.
Is there a workaround for CVE-2008-0782 if I cannot update immediately?
As a temporary workaround for CVE-2008-0782, you can restrict file permissions on the server to limit the impact of potential exploits.