CVE-2008-6603: Moinmo Moinmoin

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.

Affected products

• Moinmo Moinmoin: version 1.6.2 only; version 1.7.0 only

Published 2009-04-03. Last modified 2026-06-16.