[SECURITY] [DSA 4787-1] moin security update

🗓️ 09 Nov 2020 20:27:35Reported by DebianType

Two vulnerabilities in moin Python clone of WikiWiki could allow stored XSS and remote code execution

Reporter	Title	Published	Views	Family All 55
FreeBSD	moinmoin -- multiple vulnerabilities	8 Nov 202000:00	–	freebsd
BDU FSTEC	The vulnerability of the action/cache.py component in the MoinMoin wiki platform, which involves an incorrect restriction on the path name to the catalog, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SVG file on the MoinMoin wiki platform, due to deficiencies in the measures used to protect web page structures, allows attackers to compromise the integrity of the data.	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-15275	11 Nov 202018:30	–	circl
Circl	CVE-2020-25074	10 Nov 202020:27	–	circl
CNVD	MoinMoin Cross-Site Scripting Vulnerability	12 Nov 202000:00	–	cnvd
CVE	CVE-2020-15275	11 Nov 202015:45	–	cve
CVE	CVE-2020-25074	10 Nov 202016:48	–	cve
Cvelist	CVE-2020-15275 malicious SVG attachment causing stored XSS vulnerability in MoinMoin	11 Nov 202015:45	–	cvelist
Cvelist	CVE-2020-25074	10 Nov 202016:48	–	cvelist