Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-775G-4482-PM94
HistoryMay 01, 2022 - 11:33 p.m.

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

2022-05-0123:33:02
CWE-79
GitHub Advisory Database
github.com
6
moinmoin
cross-site scripting (xss)
vulnerabilities
remote attackers
web script
html
attachfile.py

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.004

Percentile

74.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. The issue was fixed on db212dfc58ef.

Affected configurations

Vulners
Node
moinRange≤1.5.8
VendorProductVersionCPE
*moin*cpe:2.3:a:*:moin:*:*:*:*:*:*:*:*

Related

nvd 2
cvelist 2
ubuntucve 2
redhatcve 2
prion 2
debiancve 2
cve 2
openvas 26
fedora 9
nessus 8
github 1
gentoo 1
securityvulns 2
ubuntu 1
osv 1
debian 1
freebsd 1
nvd
nvd
CVE-2008-0781
2008-02-14 21:00:00
CVE-2008-1098
2008-03-05 20:44:00
cvelist
cvelist
CVE-2008-0781
2008-02-14 20:00:00
CVE-2008-1098
2008-03-05 20:00:00
ubuntucve
ubuntucve
CVE-2008-0781
2008-02-14 00:00:00
CVE-2008-1098
2008-03-05 00:00:00
redhatcve
redhatcve
CVE-2008-0781
2019-10-04 21:48:32
CVE-2008-1098
2019-10-04 21:52:00
prion
prion
Cross site scripting
2008-02-14 21:00:00
Cross site scripting
2008-03-05 20:44:00
debiancve
debiancve
CVE-2008-0781
2008-02-14 21:00:00
CVE-2008-1098
2008-03-05 20:44:00
cve
cve
CVE-2008-0781
2008-02-14 21:00:00
CVE-2008-1098
2008-03-05 20:44:00
openvas
openvas
Fedora Update for moin FEDORA-2008-1905
2009-02-16 00:00:00
Fedora Update for moin FEDORA-2008-1880
2009-02-16 00:00:00
Fedora Update for moin FEDORA-2008-1880
2009-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: moin-1.5.8-4.fc7
2008-02-21 02:55:18
[SECURITY] Fedora 8 Update: moin-1.5.8-4.fc8
2008-02-21 02:57:22
[SECURITY] Fedora 9 Update: moin-1.6.4-2.fc9
2009-06-18 11:43:30
nessus
nessus
Fedora 7 : moin-1.5.8-4.fc7 (2008-1880)
2008-02-25 00:00:00
Fedora 8 : moin-1.5.8-4.fc8 (2008-1905)
2008-02-25 00:00:00
Fedora 10 : moin-1.6.4-1.fc10 (2009-3868)
2009-04-23 00:00:00
github
github
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
2022-05-01 23:36:32
gentoo
gentoo
MoinMoin: Multiple vulnerabilities
2008-03-18 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-03-10 00:00:00
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-10 00:00:00
ubuntu
ubuntu
MoinMoin vulnerabilities
2009-01-30 00:00:00
osv
osv
moin
2008-03-09 00:00:00
debian
debian
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-09 14:39:08
freebsd
freebsd
moinmoin -- multiple vulnerabilities
2007-02-08 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.004

Percentile

74.0%

JSON
Related for GHSA-775G-4482-PM94
nvd2cvelist2ubuntucve2redhatcve2prion2debiancve2cve2openvas26fedora9nessus8github1gentoo1securityvulns2ubuntu1osv1debian1freebsd1