MoinMoin vulnerability

2009-05-1100:00:00

ubuntu.com

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.0%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10

Packages

moin -

Details

It was discovered that MoinMoin did not properly sanitize its input when
attaching files, resulting in cross-site scripting (XSS) vulnerabilities.
With cross-site scripting vulnerabilities, if a user were tricked into
viewing server output during a crafted server request, a remote attacker
could exploit this to modify the contents, or steal confidential data,
within the same domain.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchpython-moinmoin< 1.8.2-2ubuntu2.1UNKNOWN
Ubuntu8.10noarchpython-moinmoin< 1.7.1-1ubuntu1.2UNKNOWN