Gentoo FoundationGLSA-201309-14MoinMoin: Multiple vulnerabilities
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.955 High
EPSS
Percentile
99.4%
Background
MoinMoin is a Python WikiEngine.
Description
Multiple vulnerabilities have been discovered in MoinMoin. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker may be able to execute arbitrary code with the privileges of the process, overwrite arbitrary files, or conduct Cross-Site Scripting (XSS) attacks.
Workaround
There is no known workaround at this time.
Resolution
All MoinMoin users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/moinmoin-1.9.6"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | www-apps/moinmoin | <Β 1.9.6 | UNKNOWN |
Related
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.955 High
EPSS
Percentile
99.4%