Lucene search
+L

748 matches found

OSV
OSV
added 2022/05/17 4:56 a.m.6 views

GHSA-M2C4-JGMM-FVQ3 MoinMoin Multiple unrestricted file upload vulnerabilities

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

6.3CVSS7.3AI score0.30566EPSS
SaveExploits8References13
Github Security Blog
Github Security Blog
added 2022/05/17 3:2 a.m.29 views

MoinMoin Cross-site Scripting (XSS) vulnerability

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting XSS" issue affecting the action=AttachFile via page name component...

6.1CVSS5.9AI score0.01186EPSS
SaveExploits3References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 3:2 a.m.22 views

MoinMoin Cross-site Scripting (XSS) vulnerability

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting XSS" issue affecting the action=fckdialog&dialog=attachment via page name component...

6.1CVSS6.4AI score0.01186EPSS
SaveExploits3References7Affected Software1
OSV
OSV
added 2022/05/17 3:2 a.m.20 views

GHSA-FJ26-Q4VH-85F6 MoinMoin Cross-site Scripting (XSS) vulnerability

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting XSS" issue affecting the action=fckdialog&dialog=attachment via page name component...

6.1CVSS6AI score0.01186EPSS
SaveExploits3References7
OSV
OSV
added 2022/05/17 3:2 a.m.3 views

GHSA-3X76-J3JJ-439J MoinMoin Cross-site Scripting (XSS) vulnerability

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting XSS" issue affecting the action=AttachFile via page name component...

6.1CVSS6AI score0.01186EPSS
SaveExploits3References7
Github Security Blog
Github Security Blog
added 2022/05/17 3:2 a.m.22 views

MoinMoin Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.6AI score0.01452EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/17 3:2 a.m.5 views

GHSA-5FQ5-PFV8-MRFV MoinMoin Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score0.01452EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/17 2:10 a.m.27 views

MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

6.8CVSS7.3AI score0.01637EPSS
SaveExploits1References15Affected Software1
OSV
OSV
added 2022/05/17 2:10 a.m.30 views

GHSA-WC8W-GH5M-62FV MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

8.7CVSS6.2AI score0.01637EPSS
SaveExploits1References15
Github Security Blog
Github Security Blog
added 2022/05/17 2:1 a.m.17 views

MoinMoin Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some...

2.6CVSS5.6AI score0.02517EPSS
SaveExploits1References15Affected Software1
OSV
OSV
added 2022/05/17 2:1 a.m.7 views

GHSA-M9J7-XCJ7-42J9 MoinMoin Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some...

6.1CVSS5.4AI score0.02517EPSS
SaveExploits1References15
Github Security Blog
Github Security Blog
added 2022/05/02 6:15 a.m.23 views

MoinMoin Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI...

3.5CVSS5.2AI score0.02243EPSS
SaveExploits1References22Affected Software1
OSV
OSV
added 2022/05/02 6:15 a.m.7 views

GHSA-FC72-V54C-X9JG MoinMoin Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI...

5.4CVSS5AI score0.02243EPSS
SaveExploits1References22
Github Security Blog
Github Security Blog
added 2022/05/02 6:15 a.m.23 views

MoinMoin has improper default configuration

The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...

7.5CVSS6.6AI score0.01973EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2022/05/02 6:15 a.m.5 views

GHSA-5JJR-GMQ3-F986 MoinMoin has improper default configuration

The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...

7.5CVSS6.3AI score0.01973EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2022/05/02 6:14 a.m.25 views

MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

6.8CVSS6.6AI score0.02181EPSS
SaveExploits0References19Affected Software1
OSV
OSV
added 2022/05/02 6:14 a.m.9 views

GHSA-574F-MH6M-C6QM MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

6.8CVSS6.2AI score0.02181EPSS
SaveExploits0References19
OSV
OSV
added 2022/05/02 6:14 a.m.27 views

GHSA-876C-QMCF-CXV6 MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAYINTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors...

8.7CVSS5.8AI score0.01869EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2022/05/02 6:14 a.m.19 views

MoinMoin improper sanitizes user profiles

MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors...

7.5CVSS6.7AI score0.01897EPSS
SaveExploits0References13Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/02 6:14 a.m.25 views

MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAYINTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors...

5CVSS6.4AI score0.01869EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder