Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1tODR3LXZnd2YtcDg5M82Yyw

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.

Permalink: https://github.com/advisories/GHSA-m84w-vgwf-p893
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tODR3LXZnd2YtcDg5M82Yyw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 2 years ago
Updated: 7 months ago

EPSS Percentage: 0.01146
EPSS Percentile: 0.85058

Identifiers: GHSA-m84w-vgwf-p893, CVE-2007-0857
References:

• https://nvd.nist.gov/vuln/detail/CVE-2007-0857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32377
• http://moinmoin.wikiwikiweb.de/MoinMoinRelease1.5/CHANGES
• http://osvdb.org/31871
• http://osvdb.org/31872
• http://osvdb.org/31873
• http://secunia.com/advisories/24096
• http://secunia.com/advisories/24117
• http://www.osvdb.org/31874
• http://www.securityfocus.com/bid/22506
• http://www.ubuntu.com/usn/usn-421-1
• http://www.vupen.com/english/advisories/2007/0553
• https://github.com/advisories/GHSA-m84w-vgwf-p893

Blast Radius: 0.0

Affected Packages