The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.
"https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2008-12.yaml"