MoinMoin vulnerabilities

2010-08-2500:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.008

Percentile

81.3%

JSON

Releases

Ubuntu 10.04
Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.04
Ubuntu 6.06

Packages

moin -

Details

It was discovered that MoinMoin did not properly sanitize its input,
resulting in cross-site scripting (XSS) vulnerabilities. With cross-site
scripting vulnerabilities, if a user were tricked into viewing server
output during a crafted server request, a remote attacker could exploit
this to modify the contents, or steal confidential data, within the same
domain.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchpython-moinmoin< 1.8.4-1ubuntu1.3UNKNOWN
Ubuntu9.04noarchpython-moinmoin< 1.8.2-2ubuntu2.5UNKNOWN
Ubuntu8.04noarchpython-moinmoin< 1.5.8-5.1ubuntu2.5UNKNOWN
Ubuntu8.04noarchmoinmoin-common< 1.5.8-5.1ubuntu2.5UNKNOWN
Ubuntu6.06noarchpython2.4-moinmoin< 1.5.2-1ubuntu2.7UNKNOWN
Ubuntu6.06noarchmoinmoin-common< 1.5.2-1ubuntu2.7UNKNOWN
Ubuntu6.06noarchpython-moinmoin< 1.5.2-1ubuntu2.7UNKNOWN
Ubuntu10.04noarchpython-moinmoin< 1.9.2-2ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	python-moinmoin	< 1.8.4-1ubuntu1.3	UNKNOWN
Ubuntu	9.04	noarch	python-moinmoin	< 1.8.2-2ubuntu2.5	UNKNOWN
Ubuntu	8.04	noarch	python-moinmoin	< 1.5.8-5.1ubuntu2.5	UNKNOWN
Ubuntu	8.04	noarch	moinmoin-common	< 1.5.8-5.1ubuntu2.5	UNKNOWN
Ubuntu	6.06	noarch	python2.4-moinmoin	< 1.5.2-1ubuntu2.7	UNKNOWN
Ubuntu	6.06	noarch	moinmoin-common	< 1.5.2-1ubuntu2.7	UNKNOWN
Ubuntu	6.06	noarch	python-moinmoin	< 1.5.2-1ubuntu2.7	UNKNOWN
Ubuntu	10.04	noarch	python-moinmoin	< 1.9.2-2ubuntu3.1	UNKNOWN