CVE-2008-1099

MoinMoin Improper Access Control

5.0 MediumFix available

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

Exploit likelihood

2.02%Down 1.8 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

Record: CVE-2008-1099
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

Record: CVE-2008-1099
Updated: 2026-11-02

EUVDEUVD-2022-4378 No score

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

Record: EUVD-2022-4378
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jj2f-57jg-5rm6 No score

MoinMoin Improper Access Control

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.

Record: GHSA-jj2f-57jg-5rm6
Updated: 2026-11-02

OSVGHSA-jj2f-57jg-5rm6 No score

MoinMoin Improper Access Control

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.

Record: GHSA-jj2f-57jg-5rm6
Updated: 2026-11-02

OSVPYSEC-2026-677 No score

MoinMoin Improper Access Control

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734.

Record: PYSEC-2026-677
Updated: 2026-11-02

Affected products

moinmoin

Affected packages

Affected packages
Package	Affected	Fixed
`moin` PyPI	through 1.5.8	None known
`moin` Debian:4.0	before 1.5.3-1.2etch1, plus listed versions 1.5.3-1.2	1.5.3-1.2etch1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1099 is a medium vulnerability (CVSS 5.0) in Moinmoin, published March 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.02%, the 80th percentile. Fixed in moin 1.5.3-1.2etch1.

References

Show 10 moreShow less