Ubuntu.comUB:CVE-2009-1482CVE-2009-1482
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.1%
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py
in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary
web script or HTML via (1) an AttachFile sub-action in the error_msg
function or (2) multiple vectors related to package file errors in the
upload_form function, different vectors than CVE-2009-0260.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | debian says etch is not affected, as the XSS vulns are already fixed. I checked dapper and hardy and they don’t seem affected either. |
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.1%