Oval Definition:oval:org.opensuse.security:def:202025074
Revision Date:2022-05-22Version:1
Title:CVE-2020-25074
Description:

The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2020-25074
Mitre CVE-2020-25074
SUSE CVE-2020-25074
openSUSE-SU-2020:1966-1
openSUSE-SU-2020:1998-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
SUSE Package Hub for SUSE Linux Enterprise 15 SP2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • moinmoin-wiki-1.9.11-lp152.3.3.1 is installed
  • AND moinmoin-wiki is signed with openSUSE key
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND moinmoin-wiki-1.9.11-bp152.4.3.1 is installed
  • BACK