Lucene search

K
freebsdFreeBSDBFE218A5-4218-11DE-B67A-0030843D3802
HistoryApr 21, 2009 - 12:00 a.m.

moinmoin -- cross-site scripting vulnerabilities

2009-04-2100:00:00
vuxml.freebsd.org
9

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.0%

Secunia reports:

Input passed via multiple parameters to action/AttachFile.py is not
properly sanitised before being returned to the user. This can be
exploited to execute arbitrary HTML and script code in a user’s
browser session in the context of an affected site.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmoinmoin< 1.8.3UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.0%

Related for BFE218A5-4218-11DE-B67A-0030843D3802