Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2970
HistoryAug 05, 2010 - 12:00 a.m.

CVE-2010-2970

2010-08-0500:00:00
ubuntu.com
ubuntu.com
6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.2%

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x
before 1.9.3 allow remote attackers to inject arbitrary web script or HTML
via crafted content, related to (1) action/SlideShow.py, (2)
action/anywikidraw.py, and (3) action/language_setup.py, a similar issue to
CVE-2010-2487.

Bugs

Notes

Author Note
mdeslaur see CVE-2010-2487 for patches
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchmoin< 1.9.2-2ubuntu3.1UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.2%