CVE-2007-0902 MoinMoin Insertion of Sensitive Information into Log File
Remote attackers can obtain sensitive information via the debugging feature in MoinMoin wiki software.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-0902?
CVE-2007-0902 is a medium-severity vulnerability in n/a, published on 13 Feb 2007. It can be exploited over the network, with no action from the victim.
Official description
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Which versions are affected by CVE-2007-0902?
3 open source packages ship an affected version, including moin. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
moin PyPI | From 1.5.7 | 1.5.8 |
moin PyPI | From 1.5.7 | 1.5.8 |
moin PyPI | From 1.5.7 | 1.5.8 |
Products include Moinmoin Moinmoin.
How do I fix CVE-2007-0902?
Upgrade moin to 1.5.8 or later.
Is CVE-2007-0902 being exploited?
There is no known exploitation of CVE-2007-0902 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-mxh8-xgq9-w782, PYSEC-2026-679.