CVE-2008-6548: Moinmo Moinmoin

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.

Affected products

• Moinmo Moinmoin: version 1.6.1 only

Published 2009-03-30. Last modified 2026-06-16.