Lucene search

K
freebsdFreeBSD4A8A98AB-F745-11E1-8BD8-0022156E8794
HistoryFeb 21, 2011 - 12:00 a.m.

moinmoin -- cross-site scripting via RST parser

2011-02-2100:00:00
vuxml.freebsd.org
15

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.1%

MITRE CVE team reports:

Cross-site scripting (XSS) vulnerability in the
reStructuredText (rst) parser in parser/text_rst.py in
MoinMoin before 1.9.4, when docutils is installed or when
“format rst” is set, allows remote attackers to inject
arbitrary web script or HTML via a javascript: URL in the
refuri attribute.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmoinmoin< 1.9.4UNKNOWN

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.1%