{"id":"CVE-2007-0902","aliases":["EUVD-2022-4650","GHSA-mxh8-xgq9-w782","PYSEC-2026-679"],"status":"published","title":"MoinMoin Insertion of Sensitive Information into Log File","description":"Unspecified vulnerability in the \"Show debugging information\" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01361,"percentile":0.71929,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2007-02-13T20:00:00Z","modified":"2026-07-06T08:11:24Z","fixes":[{"ecosystem":"PyPI","package":"moin","fixed_in":["1.5.8"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"moin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.7"},{"last_affected":"1.5.7"},{"fixed":"1.5.8"}]}],"versions":["1.5.7"]},{"source":"osv","ecosystem":"PyPI","package":"moin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.7"},{"fixed":"1.5.8"}]}],"versions":["1.5.7"]},{"source":"osv","ecosystem":"PyPI","package":"moin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.7"},{"fixed":"1.5.8"}]}],"versions":["1.5.7"]}],"products":[{"vendor":"moinmoin","product":"moinmoin"}],"references":[{"url":"http://secunia.com/advisories/24138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://www.ubuntu.com/usn/usn-423-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory","web"]},{"url":"http://osvdb.org/33173","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/22515","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/24244","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0902","tags":["advisory"]},{"url":"https://moinmo.in/MoinMoinRelease1.5/CHANGES","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mxh8-xgq9-w782","tags":["advisory"]},{"url":"https://pypi.org/project/moin","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2007-0902","description":"Unspecified vulnerability in the \"Show debugging information\" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","status":"published","published":"2007-02-13T20:00:00Z","modified":"2024-08-07T12:34:21.297Z","updated_at":"2026-11-02T13:34:15.046008Z"}],"euvd":[{"id":"EUVD-2022-4650","description":"Unspecified vulnerability in the \"Show debugging information\" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","status":"published","published":"2007-02-13T20:00:00Z","modified":"2024-08-07T12:34:21Z","updated_at":"2026-11-03T01:38:28.235221Z"}],"ghsa":[{"id":"GHSA-mxh8-xgq9-w782","title":"MoinMoin Insertion of Sensitive Information into Log File","description":"An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system.  MoinMoin administrators can add \"show_traceback=0\" to their site configurations to disable debug tracebacks.","status":"published","published":"2022-05-01T17:47:55Z","modified":"2024-05-14T20:50:30Z","cwes":["CWE-532"],"updated_at":"2026-11-02T14:37:48.848211Z"}],"nvd":[{"id":"CVE-2007-0902","description":"Unspecified vulnerability in the \"Show debugging information\" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","status":"published","published":"2007-02-13T20:28:00Z","modified":"2026-06-16T22:36:30.993Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:13.10493Z"}],"osv":[{"id":"CVE-2007-0902","description":"Unspecified vulnerability in the \"Show debugging information\" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","status":"withdrawn","published":"2007-02-13T20:28:00Z","modified":"2026-07-06T08:11:24.024461879Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"GHSA-mxh8-xgq9-w782","title":"MoinMoin Insertion of Sensitive Information into Log File","description":"An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system.  MoinMoin administrators can add \"show_traceback=0\" to their site configurations to disable debug tracebacks.","status":"published","published":"2022-05-01T17:47:55Z","modified":"2026-07-06T08:11:24.024461879Z","cwes":["CWE-532"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"PYSEC-2026-679","title":"MoinMoin Insertion of Sensitive Information into Log File","description":"An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system.  MoinMoin administrators can add \"show_traceback=0\" to their site configurations to disable debug tracebacks.","status":"published","published":"2026-07-02T14:13:20.125761Z","modified":"2026-07-06T08:00:44.772810771Z","updated_at":"2026-11-02T15:52:58.117212Z"}]}}