GHSA-5m2m-27cg-7v4v
Suggest an improvement- Source
- https://github.com/advisories/GHSA-5m2m-27cg-7v4v
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5m2m-27cg-7v4v/GHSA-5m2m-27cg-7v4v.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-5m2m-27cg-7v4v
- Aliases
-
- CVE-2010-2487
- PYSEC-2010-16
- Published
- 2022-05-17T05:49:23Z
- Modified
- 2024-09-26T15:29:59.153396Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N CVSS Calculator
- Summary
- MoinMoin Cross-site Scripting (XSS) vulnerability
- Details
-
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1)
Page.py, (2)PageEditor.py, (3)PageGraphicalEditor.py, (4)action/CopyPage.py, (5)action/Load.py, (6)action/RenamePage.py, (7)action/backup.py, (8)action/login.py, (9)action/newaccount.py, and (10)action/recoverpass.py. - Database specific
{ "github_reviewed": true, "nvd_published_at": "2010-08-05T13:22:00Z", "severity": "MODERATE", "cwe_ids": [ "CWE-79" ], "github_reviewed_at": "2024-05-01T16:27:33Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2010-2487
- https://github.com/moinwiki/moin
- https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-16.yaml
- https://web.archive.org/web/20140801154518/http://secunia.com/advisories/40836
- https://web.archive.org/web/20200228150629/http://www.securityfocus.com/bid/40549
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809
- http://hg.moinmo.in/moin/1.7/rev/37306fba2189
- http://hg.moinmo.in/moin/1.8/raw-file/1.8.8/docs/CHANGES
- http://hg.moinmo.in/moin/1.8/rev/4238b0c90871
- http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES
- http://hg.moinmo.in/moin/1.9/rev/68ba3cc79513
- http://hg.moinmo.in/moin/1.9/rev/e50b087c4572
- http://marc.info/?l=oss-security&m=127799369406968&w=2
- http://marc.info/?l=oss-security&m=127809682420259&w=2
- http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg
- http://moinmo.in/MoinMoinRelease1.8
- http://moinmo.in/MoinMoinRelease1.9
- http://moinmo.in/SecurityFixes
- http://www.debian.org/security/2010/dsa-2083
Affected packages
PyPI / moin
Package
- Name
- moin
- View open source insights on deps.dev
- Purl
- pkg:pypi/moin
PyPI / moin
Package
- Name
- moin
- View open source insights on deps.dev
- Purl
- pkg:pypi/moin
PyPI / moin
Package
- Name
- moin
- View open source insights on deps.dev
- Purl
- pkg:pypi/moin