Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27853
HistoryNov 10, 2020 - 3:43 a.m.

Remote Code Execution

2020-11-1003:43:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
moinmoin
remote code execution
server process
write permissions
attachment upload
malicious code

EPSS

0.014

Percentile

86.9%

moin is vulnerable to remote code execution. An attacker with write permissions is able to upload and execute malicious code via the normal wiki attachment upload functionality in the context of the server process worker by using the vulnerable MoinMoin cache action.