Lucene search

GoogleOSV:DSA-1715-1

HistoryJan 29, 2009 - 12:00 a.m.

moin - insufficient input sanitising

2009-01-2900:00:00

Google

osv.dev

0.008 Low

EPSS

Percentile

81.4%

JSON

It was discovered that the AttachFile action in moin, a python clone of
WikiWiki, is prone to cross-site scripting attacks (CVE-2009-0260).
Another cross-site scripting vulnerability was discovered in the
antispam feature (CVE-2009-0312).

For the stable distribution (etch) these problems have been fixed in
version 1.5.3-1.2etch2.

For the testing (lenny) distribution these problems have been fixed in
version 1.7.1-3+lenny1.

For the unstable (sid) distribution these problems have been fixed in
version 1.8.1-1.1.

We recommend that you upgrade your moin packages.

CPENameOperatorVersion
moineq1.5.3-1.2
moineq1.5.3-1.2etch1

CPE	Name	Operator	Version
	moin	eq	1.5.3-1.2
	moin	eq	1.5.3-1.2etch1

References

www.debian.org/security/2009/dsa-1715

0.008 Low

EPSS

Percentile

81.4%

JSON

Related for OSV:DSA-1715-1