PT-2010-4443 · Moinmoin · Moinmoin

Raphael Geissert

·

Publicado

2010-08-04

·

Atualizado

2022-05-17

·

CVE-2010-2969

CVSS v4.0

5.1

Média

VetorAV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.7.3 and earlier MoinMoin versions 1.9.x before 1.9.3
Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted content. This is related to multiple cross-site scripting (XSS) vulnerabilities in certain files, including action/LikePages.py, action/chart.py, and action/userprofile.py.
Recommendations For MoinMoin versions 1.7.3 and earlier, update to a version later than 1.7.3. For MoinMoin versions 1.9.x before 1.9.3, update to version 1.9.3 or later. As a temporary workaround, consider restricting access to the affected files, such as action/LikePages.py, action/chart.py, and action/userprofile.py, until a patch is available.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-2969
GHSA-2J76-26QQ-7RVV
PYSEC-2010-17

Produtos afetados

Moinmoin