Every CVESearch/Get API key

CVE-2007-2637

MoinMoin Improper ACL handling for calendars and includes

5.0 MediumFix available

CVE-2007-2637 is a medium vulnerability (CVSS 5.0) in Moinmoin, published May 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. Fixed in moin 1.5.8.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
1.49%EPSS, 74th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.5.8moin +1 more

Description

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Exploit likelihood

1.49%Up 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
moin
PyPI
before 1.5.8
1.5.8
moin
Debian:4.0
From an advisory covering 7 CVEs
before 1.5.3-1.2etch1, plus listed versions
1.5.3-1.2
1.5.3-1.2etch1

What each source reports

NVD Score used5.0

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
CVE-2007-2637
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE ListNo score

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
CVE-2007-2637
Updated
2026-11-02
EUVDEUVD-2022-3594No score

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
EUVD-2022-3594
Updated
2026-11-03
GitHub AdvisoriesGHSA-cmg7-xr2j-4r9vNo score

MoinMoin Improper ACL handling for calendars and includes

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
GHSA-cmg7-xr2j-4r9v
Updated
2026-11-02
OSVNo score

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
CVE-2007-2637
Updated
2026-11-02
OSVGHSA-cmg7-xr2j-4r9vNo score

MoinMoin Improper ACL handling for calendars and includes

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
GHSA-cmg7-xr2j-4r9v
Updated
2026-11-02
OSVPYSEC-2026-675No score

MoinMoin Improper ACL handling for calendars and includes

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

Record
PYSEC-2026-675
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 4 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open