Lucene search
GoogleOSV:PYSEC-2020-241HistoryNov 11, 2020 - 4:15 p.m.
PYSEC-2020-241
2020-11-1116:15:00
Google
osv.dev
5
0.001 Low
EPSS
Percentile
34.7%
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user’s browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes.
Related
redhatcve
redhatcve
CVE-2020-15275
2022-05-21 00:23:34
nvd
nvd
CVE-2020-15275
2020-11-11 16:15:13
github
github
malicious SVG attachment causing stored XSS vulnerability
2020-11-11 15:54:41
debiancve
debiancve
CVE-2020-15275
2020-11-11 16:15:13
osv
osv
malicious SVG attachment causing stored XSS vulnerability
2020-11-11 15:54:41
CVE-2020-15275
2020-11-11 16:15:13
moin - security update
2020-11-10 00:00:00
ubuntucve
ubuntucve
CVE-2020-15275
2020-11-09 00:00:00
prion
prion
Design/Logic Flaw
2020-11-11 16:15:00
cvelist
cvelist
cve
cve
CVE-2020-15275
2020-11-11 16:15:13
veracode
veracode
Cross-Site Scripting
2020-11-10 03:54:16
openvas
openvas
MoinMoin < 1.9.11 Multiple Vulnerabilities - Linux
2020-11-11 00:00:00
Ubuntu: Security Advisory (USN-4629-1)
2020-11-12 00:00:00
Debian: Security Advisory (DLA-2446-1)
2020-11-11 00:00:00
ubuntu
ubuntu
MoinMoin vulnerabilities
2020-11-11 00:00:00
nessus
nessus
Debian DLA-2446-1 : moin security update
2020-11-12 00:00:00
Debian DSA-4787-1 : moin - security update
2020-11-10 00:00:00
debian
debian
[SECURITY] [DSA 4787-1] moin security update
2020-11-09 20:27:35
[SECURITY] [DLA 2446-1] moin security update
2020-11-10 21:43:54
[SECURITY] [DSA 4787-1] moin security update
2020-11-09 20:27:35
suse
suse
Security update for moinmoin-wiki (important)
2020-11-23 00:00:00
Security update for moinmoin-wiki (important)
2020-11-19 00:00:00
freebsd
freebsd
moinmoin -- multiple vulnerabilities
2020-11-08 00:00:00