CVE-2010-0669 MoinMoin improper sanitizes user profiles
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi moin(PyPI) | < 1.8.7 | 1.8.7 |
| pypi moin(PyPI) | = 1.8.4 | No fix listed |
| pypi moin(PyPI) | = 1.8.5 | No fix listed |
| pypi moin(PyPI) | = 1.8.6 | No fix listed |
| pypi moin(PyPI) | >= 1.9, < 1.9.2 | 1.9.2 |
| pypi moin(PyPI) | = 1.9.0 | No fix listed |
| pypi moin(PyPI) | = 1.9.1 | No fix listed |
| moinmoin | <= 1.8.6 | No fix listed |
| moinmoin | = 1.5.0 | No fix listed |
| moinmoin | = 1.5.0-beta1 | No fix listed |
| moinmoin | = 1.5.0-beta2 | No fix listed |
| moinmoin | = 1.5.0-beta3 | No fix listed |
| moinmoin | = 1.5.0-beta4 | No fix listed |
| moinmoin | = 1.5.0-beta5 | No fix listed |
| moinmoin | = 1.5.0-beta6 | No fix listed |
| moinmoin | = 1.5.0-rc1 | No fix listed |
| moinmoin | = 1.5.1 | No fix listed |
| moinmoin | = 1.5.2 | No fix listed |
| moinmoin | = 1.5.3 | No fix listed |
| moinmoin | = 1.5.3-rc1 | No fix listed |
| moinmoin | = 1.5.3-rc2 | No fix listed |
| moinmoin | = 1.5.4 | No fix listed |
| moinmoin | = 1.5.5 | No fix listed |
| moinmoin | = 1.5.5-rc1 | No fix listed |
| moinmoin | = 1.5.5a | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| moinmoin | = 1.5.6 | No fix listed |
| moinmoin | = 1.5.7 | No fix listed |
| moinmoin | = 1.5.8 | No fix listed |
| moinmoin | = 1.6.0 | No fix listed |
| moinmoin | = 1.6.0-beta1 | No fix listed |
| moinmoin | = 1.6.0-beta2 | No fix listed |
| moinmoin | = 1.6.0-rc1 | No fix listed |
| moinmoin | = 1.6.0-rc2 | No fix listed |
| moinmoin | = 1.6.1 | No fix listed |
| moinmoin | = 1.6.2 | No fix listed |
| moinmoin | = 1.6.3 | No fix listed |
| moinmoin | = 1.6.4 | No fix listed |
| moinmoin | = 1.7.0 | No fix listed |
| moinmoin | = 1.7.0-beta1 | No fix listed |
| moinmoin | = 1.7.0-beta2 | No fix listed |
| moinmoin | = 1.7.0-rc1 | No fix listed |
| moinmoin | = 1.7.0-rc2 | No fix listed |
| moinmoin | = 1.7.0-rc3 | No fix listed |
| moinmoin | = 1.7.1 | No fix listed |
| moinmoin | = 1.7.2 | No fix listed |
| moinmoin | = 1.7.3 | No fix listed |
| moinmoin | = 1.8.0 | No fix listed |
| moinmoin | = 1.8.1 | No fix listed |
| moinmoin | = 1.8.2 | No fix listed |
| moinmoin | = 1.8.3 | No fix listed |
| moinmoin | = 1.8.4 | No fix listed |
| moinmoin | = 1.9.0 | No fix listed |
| moinmoin | = 1.9.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com
- web.archive.org
- web.archive.org
- web.archive.org
- hg.moinmo.in
- moinmo.in
- moinmo.in vendor-advisory
- DSA-2014 vendor-advisory
- [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7 mailing-list
- [oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7 mailing-list
- [oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7 mailing-list
- 38444 third-party-advisory vendor-advisory
- 38023 vdb-entry
- ADV-2010-0600 vdb-entry vendor-advisory
- 38903 third-party-advisory vendor-advisory
- github.com vendor-advisory