MoinMoin vulnerability

2007-02-1000:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.7%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

A flaw was discovered in MoinMoin’s page name sanitizer which could lead
to a cross-site scripting attack. By tricking a user into viewing a
crafted MoinMoin page, an attacker could execute arbitrary JavaScript as
the current MoinMoin user, possibly exposing the user’s authentication
information for the domain where MoinMoin was hosted.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchpython2.4-moinmoin< 1.5.3-1ubuntu1.1UNKNOWN
Ubuntu6.06noarchpython2.4-moinmoin< 1.5.2-1ubuntu2.1UNKNOWN
Ubuntu5.10noarchmoin< 1.2.4-1ubuntu2.1UNKNOWN
Ubuntu5.10noarchpython2.3-moinmoin< 1.3.4-6ubuntu1.1UNKNOWN
Ubuntu5.10noarchpython2.4-moinmoin< 1.3.4-6ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	python2.4-moinmoin	< 1.5.3-1ubuntu1.1	UNKNOWN
Ubuntu	6.06	noarch	python2.4-moinmoin	< 1.5.2-1ubuntu2.1	UNKNOWN
Ubuntu	5.10	noarch	moin	< 1.2.4-1ubuntu2.1	UNKNOWN
Ubuntu	5.10	noarch	python2.3-moinmoin	< 1.3.4-6ubuntu1.1	UNKNOWN
Ubuntu	5.10	noarch	python2.4-moinmoin	< 1.3.4-6ubuntu1.1	UNKNOWN