GHSA-775g-4482-pm94

Source

https://github.com/advisories/GHSA-775g-4482-pm94

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-775g-4482-pm94/GHSA-775g-4482-pm94.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-775g-4482-pm94

Aliases

CVE-2008-0781
PYSEC-2026-669

Published

2022-05-01T23:33:02Z

Modified

2026-07-06T08:11:34Z

Summary

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

Details

Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. The issue was fixed on db212dfc58ef.

Database specific

{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-05-14T20:41:29Z",
    "nvd_published_at":  "2008-02-14T21:00:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

PyPI / moin

Package

Name: moin; View open source insights on deps.dev
Purl: pkg:pypi/moin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.5.8

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-775g-4482-pm94/GHSA-775g-4482-pm94.json"