CVE-2012-6080
MoinMoin Directory Traversal vulnerability
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
- Record
CVE-2012-6080- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
- Record
CVE-2012-6080- Updated
- 2026-11-02
EUVDEUVD-2013-0019 No score
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
- Record
EUVD-2013-0019- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v33q-2xcj-4f3m
MoinMoin Directory Traversal vulnerability
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
- Record
GHSA-v33q-2xcj-4f3m- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-v33q-2xcj-4f3m
MoinMoin Directory Traversal vulnerability
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
- Record
GHSA-v33q-2xcj-4f3m- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVPYSEC-2013-5 No score
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
- Record
PYSEC-2013-5- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6080 is a medium vulnerability (CVSS 6.4) in Moinmo Moinmoin, published December 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.05%, the 90th percentile. Fixed in moin 1.9.6.
References
securityfocus.com/bid/57076
moinmo.in/SecurityFixes
secunia.com/advisories/51663
debian.org/security/2012/dsa-2593
bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599
Show 12 moreShow less
hg.moinmo.in/moin/1.9/rev/3c27131a3c52
ubuntu.com/usn/usn-1680-1
openwall.com/lists/oss-security/2012/12/30/6
nvd.nist.gov/vuln/detail/CVE-2012-6080
web.archive.org/web/20130513231719/http://secunia.com/advisories/51663
github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2013-5.yaml