Lucene search

GitHub Advisory DatabaseGHSA-53WJ-6M7W-J6MJ

HistoryMay 01, 2022 - 11:33 p.m.

MoinMoin Cross-site scripting (XSS) vulnerability

2022-05-0123:33:02

CWE-79

GitHub Advisory Database

github.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.

CPENameOperatorVersion
moinlt1.6.1
moinle1.5.8

CPE	Name	Operator	Version
	moin	lt	1.6.1
	moin	le	1.5.8

References

hg.moinmo.in/moin/1.5/rev/2f952fa361c7

hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d

secunia.com/advisories/28987

secunia.com/advisories/29010

secunia.com/advisories/29262

secunia.com/advisories/29444

secunia.com/advisories/33755

www.debian.org/security/2008/dsa-1514

www.gentoo.org/security/en/glsa/glsa-200803-27.xml

www.securityfocus.com/bid/27904

www.vupen.com/english/advisories/2008/0569/references

bugzilla.redhat.com/show_bug.cgi?id=432747

github.com/advisories/GHSA-53wj-6m7w-j6mj

nvd.nist.gov/vuln/detail/CVE-2008-0780

usn.ubuntu.com/716-1

www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html

www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html