MoinMoin vulnerabilities

2010-03-1100:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.1%

JSON

Releases

Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

moin -

Details

It was discovered that several wiki actions and preference settings in
MoinMoin were not protected from cross-site request forgery (CSRF). If an
authenticated user were tricked into visiting a malicious website while
logged into MoinMoin, a remote attacker could change the user’s
configuration or wiki content. (CVE-2010-0668, CVE-2010-0717)

It was discovered that MoinMoin did not properly sanitize its input when
processing user preferences. An attacker could enter malicious content
which when viewed by a user, could render in unexpected ways.
(CVE-2010-0669)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchpython-moinmoin< 1.8.4-1ubuntu1.1UNKNOWN
Ubuntu9.04noarchpython-moinmoin< 1.8.2-2ubuntu2.2UNKNOWN
Ubuntu8.10noarchpython-moinmoin< 1.7.1-1ubuntu1.3UNKNOWN
Ubuntu8.04noarchpython-moinmoin< 1.5.8-5.1ubuntu2.3UNKNOWN
Ubuntu8.04noarchmoinmoin-common< 1.5.8-5.1ubuntu2.3UNKNOWN
Ubuntu6.06noarchpython2.4-moinmoin< 1.5.2-1ubuntu2.5UNKNOWN
Ubuntu6.06noarchmoinmoin-common< 1.5.2-1ubuntu2.5UNKNOWN
Ubuntu6.06noarchpython-moinmoin< 1.5.2-1ubuntu2.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	python-moinmoin	< 1.8.4-1ubuntu1.1	UNKNOWN
Ubuntu	9.04	noarch	python-moinmoin	< 1.8.2-2ubuntu2.2	UNKNOWN
Ubuntu	8.10	noarch	python-moinmoin	< 1.7.1-1ubuntu1.3	UNKNOWN
Ubuntu	8.04	noarch	python-moinmoin	< 1.5.8-5.1ubuntu2.3	UNKNOWN
Ubuntu	8.04	noarch	moinmoin-common	< 1.5.8-5.1ubuntu2.3	UNKNOWN
Ubuntu	6.06	noarch	python2.4-moinmoin	< 1.5.2-1ubuntu2.5	UNKNOWN
Ubuntu	6.06	noarch	moinmoin-common	< 1.5.2-1ubuntu2.5	UNKNOWN
Ubuntu	6.06	noarch	python-moinmoin	< 1.5.2-1ubuntu2.5	UNKNOWN