← Database

CVE-2008-1937

MEDIUM CVSS: 6.8 Published: 2008-04-25 Modified: 2026-06-16

Description

The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.

Affected Platforms

Moinmoin Moinmoin

Weakness Type

CWE-264

References