CVE-2012-6080: Path Traversal
Directory traversal vulnerability in the doattachmentmove function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
Other sources
Directory traversal vulnerability in the doattachmentmove function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
— GitHub
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6080?
CVE-2012-6080 is considered a high severity vulnerability due to its potential for remote file overwrites.
How do I fix CVE-2012-6080?
To fix CVE-2012-6080, upgrade MoinMoin to version 1.9.6 or later.
Which versions of MoinMoin are affected by CVE-2012-6080?
CVE-2012-6080 affects MoinMoin versions 1.9.3, 1.9.4, and 1.9.5.
What type of vulnerability is CVE-2012-6080?
CVE-2012-6080 is a directory traversal vulnerability allowing unauthorized file access.
Can CVE-2012-6080 be exploited remotely?
Yes, CVE-2012-6080 can be exploited remotely if an attacker manipulates file names to include directory traversal sequences.