GitHub Advisoryadvisory · PyPI
GHSA-775g-4482-pm94 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MEDIUM
Official page ↗
- Aliases
- CVE-2008-0781
- Ecosystem
- PyPI
- Packages
- moin
- Severity
- Moderate
- Weaknesses
- CWE-79
- Reviewed
- 2024-05-14
Affected packages
• PyPI moin: <= 1.5.8 (no fix yet)
Description
Multiple cross-site scripting (XSS) vulnerabilities in `action/AttachFile.py` in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. The issue was fixed on db212dfc58ef.
Related
Alias · CVE (1)
- CVE-2008-0781 Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject… vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-0781 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=432748 web
- https://usn.ubuntu.com/716-1 web
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html web
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html web
- http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef web
- http://secunia.com/advisories/28987 web
- http://secunia.com/advisories/29010 web
- http://secunia.com/advisories/29262 web
- http://secunia.com/advisories/29444 web
- http://secunia.com/advisories/33755 web
- http://www.debian.org/security/2008/dsa-1514 web
- http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml web
- http://www.securityfocus.com/bid/27904 web
- http://www.vupen.com/english/advisories/2008/0569/references web