CVE-2008-1937: Moinmoin

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.

Affected products

• Moinmoin Moinmoin: version 1.6.0 only; version 1.6.1 only; version 1.6.2 only

Published 2008-04-25. Last modified 2026-06-16.