Lucene search

K
freebsdFreeBSDFC4D0AE8-3FA3-11DE-A3FD-0030843D3802
HistoryJan 21, 2009 - 12:00 a.m.

moinmoin -- multiple cross site scripting vulnerabilities

2009-01-2100:00:00
vuxml.freebsd.org
20

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%

Secunia reports:

Some vulnerabilities have been reported in MoinMoin, which can be
exploited by malicious people to conduct cross-site scripting attacks.
Input passed to multiple parameters in action/AttachFile.py is not
properly sanitised before being returned to the user. This can be
exploited to execute arbitrary HTML and script code in a user’s
browser session in the context of an affected site.
Certain input passed to security/antispam.py is not properly
sanitised before being returned to the user. This can be exploited to
execute arbitrary HTML and script code in a user’s browser session in
the context of an affected site.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmoinmoin< 1.8.2UNKNOWN

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%