CVE-2012-6081 MoinMoin Multiple unrestricted file upload vulnerabilities

What is CVE-2012-6081?

CVE-2012-6081 is a medium-severity vulnerability in n/a, published on 3 Jan 2013. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012.

Which versions are affected by CVE-2012-6081?

3 open source packages ship an affected version, including moin. It affects 1 product.

Products include Moinmo Moinmoin.

How do I fix CVE-2012-6081?

Upgrade moin to 1.9.6 or later.

Is CVE-2012-6081 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-6081 exists.

Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.

Other vulnerabilities in n/a

• CVE-2020-15275 malicious SVG attachment causing stored XSS vulnerability in MoinMoin High 8.7
• CVE-2009-4762 MoinMoin Improper Access Control vulnerability High 7.5
• CVE-2010-0669 MoinMoin improper sanitizes user profiles High 7.5
• CVE-2010-0717 MoinMoin has improper default configuration High 7.5
• CVE-2010-0668 MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-m2c4-jgmm-fvq3, PYSEC-2013-6.