PT-2010-4444 · Moinmoin · Moinmoin

Raphael Geissert

·

Publicado

2010-08-04

·

Atualizado

2022-05-17

·

CVE-2010-2970

CVSS v4.0

5.1

Média

VetorAV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.9.0 through 1.9.2
Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted content. This is related to multiple cross-site scripting (XSS) vulnerabilities in files such as action/SlideShow.py, action/anywikidraw.py, and action/language setup.py.
Recommendations For MoinMoin versions 1.9.0 through 1.9.2, update to version 1.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable files action/SlideShow.py, action/anywikidraw.py, and action/language setup.py until a patch is available.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-2970
GHSA-GXH5-R8GP-PJC3
PYSEC-2010-18

Produtos afetados

Moinmoin