Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS05Z2oyLXBoNTctNTZmNc2Y_w

MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Permalink: https://github.com/advisories/GHSA-9gj2-ph57-56f5
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Z2oyLXBoNTctNTZmNc2Y_w
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: 7 months ago

Identifiers: GHSA-9gj2-ph57-56f5, CVE-2007-0901
References:

• https://nvd.nist.gov/vuln/detail/CVE-2007-0901
• http://www.ubuntu.com/usn/usn-423-1
• https://moinmo.in/MoinMoinRelease1.5/CHANGES
• https://web.archive.org/web/20070214032031/http://secunia.com/advisories/24138/
• https://web.archive.org/web/20070227204439/http://secunia.com/advisories/24244/
• https://web.archive.org/web/20080516214454/http://www.securityfocus.com/bid/22515
• https://github.com/advisories/GHSA-9gj2-ph57-56f5

Blast Radius: 0.0

Affected Packages