CVE-2004-1463
MoinMoin Improper Privilege Management
CVE-2004-1463 is a high vulnerability (CVSS 10.0) in Moinmoin, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.28%, the 83rd percentile. Fixed in moin 1.2.3.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 2.28%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.3moin +1 more
Description
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
- Record
CVE-2004-1463- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
- Record
CVE-2004-1463- Updated
- 2026-11-02
EUVDEUVD-2022-1698No score
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
- Record
EUVD-2022-1698- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xh4-wpx8-rg2wNo score
MoinMoin Improper Privilege Management
MoinMoin 1.2.2 and earlier could allow a remote attacker to gain elevated privileges, caused by an undisclosed Access Control List (ACL) vulnerability in the PageEditor.
- Record
GHSA-9xh4-wpx8-rg2w- Updated
- 2026-11-02
OSVGHSA-9xh4-wpx8-rg2wNo score
MoinMoin Improper Privilege Management
MoinMoin 1.2.2 and earlier could allow a remote attacker to gain elevated privileges, caused by an undisclosed Access Control List (ACL) vulnerability in the PageEditor.
- Record
GHSA-9xh4-wpx8-rg2w- Updated
- 2026-11-02
OSVPYSEC-2026-674No score
MoinMoin Improper Privilege Management
MoinMoin 1.2.2 and earlier could allow a remote attacker to gain elevated privileges, caused by an undisclosed Access Control List (ACL) vulnerability in the PageEditor.
- Record
PYSEC-2026-674- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
osvdb.org/displayvuln.php?osvdb_id=8195
securityfocus.com/bid/10801
sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801
gentoo.org/security/en/glsa/glsa-200408-25.xml
exchange.xforce.ibmcloud.com/vulnerabilities/16832
nvd.nist.gov/vuln/detail/CVE-2004-1463
github.com/advisories/GHSA-9xh4-wpx8-rg2w
pypi.org/project/moin