CVE-2010-2487 MoinMoin Cross-site Scripting (XSS) vulnerability
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi moin(PyPI) | <= 1.7.3 | No fix listed |
| pypi moin(PyPI) | >= 1.8.0, < 1.8.8 | 1.8.8 |
| pypi moin(PyPI) | = 1.8.4 | No fix listed |
| pypi moin(PyPI) | = 1.8.5 | No fix listed |
| pypi moin(PyPI) | = 1.8.6 | No fix listed |
| pypi moin(PyPI) | = 1.8.7 | No fix listed |
| pypi moin(PyPI) | >= 1.9.0, < 1.9.3 | 1.9.3 |
| pypi moin(PyPI) | = 1.9.0 | No fix listed |
| pypi moin(PyPI) | = 1.9.1 | No fix listed |
| pypi moin(PyPI) | = 1.9.2 | No fix listed |
| pypi moin(PyPI) | >= 1.8, < 1.8.8 | 1.8.8 |
| pypi moin(PyPI) | >= 1.9, < 1.9.3 | 1.9.3 |
| moinmoin | <= 1.7.3 | No fix listed |
| moinmoin | = 0.1 | No fix listed |
| moinmoin | = 0.2 | No fix listed |
| moinmoin | = 0.3 | No fix listed |
| moinmoin | = 0.4 | No fix listed |
| moinmoin | = 0.5 | No fix listed |
| moinmoin | = 0.6 | No fix listed |
| moinmoin | = 0.7 | No fix listed |
| moinmoin | = 0.8 | No fix listed |
| moinmoin | = 0.9 | No fix listed |
| moinmoin | = 0.10 | No fix listed |
| moinmoin | = 0.11 | No fix listed |
| moinmoin | = 1.0 | No fix listed |
Show 61 more
| Product | Affected versions | Fixed in |
|---|---|---|
| moinmoin | = 1.1 | No fix listed |
| moinmoin | = 1.2 | No fix listed |
| moinmoin | = 1.2.1 | No fix listed |
| moinmoin | = 1.2.2 | No fix listed |
| moinmoin | = 1.2.3 | No fix listed |
| moinmoin | = 1.2.4 | No fix listed |
| moinmoin | = 1.3.0 | No fix listed |
| moinmoin | = 1.3.1 | No fix listed |
| moinmoin | = 1.3.2 | No fix listed |
| moinmoin | = 1.3.3 | No fix listed |
| moinmoin | = 1.3.4 | No fix listed |
| moinmoin | = 1.3.5 | No fix listed |
| moinmoin | = 1.3.5-rc1 | No fix listed |
| moinmoin | = 1.4 | No fix listed |
| moinmoin | = 1.5.0 | No fix listed |
| moinmoin | = 1.5.0-beta1 | No fix listed |
| moinmoin | = 1.5.0-beta2 | No fix listed |
| moinmoin | = 1.5.0-beta3 | No fix listed |
| moinmoin | = 1.5.0-beta4 | No fix listed |
| moinmoin | = 1.5.0-beta5 | No fix listed |
| moinmoin | = 1.5.0-beta6 | No fix listed |
| moinmoin | = 1.5.0-rc1 | No fix listed |
| moinmoin | = 1.5.1 | No fix listed |
| moinmoin | = 1.5.2 | No fix listed |
| moinmoin | = 1.5.3 | No fix listed |
| moinmoin | = 1.5.3-rc1 | No fix listed |
| moinmoin | = 1.5.3-rc2 | No fix listed |
| moinmoin | = 1.5.4 | No fix listed |
| moinmoin | = 1.5.5 | No fix listed |
| moinmoin | = 1.5.5-rc1 | No fix listed |
| moinmoin | = 1.5.5a | No fix listed |
| moinmoin | = 1.5.6 | No fix listed |
| moinmoin | = 1.5.7 | No fix listed |
| moinmoin | = 1.5.8 | No fix listed |
| moinmoin | = 1.6.0 | No fix listed |
| moinmoin | = 1.6.0-beta1 | No fix listed |
| moinmoin | = 1.6.0-beta2 | No fix listed |
| moinmoin | = 1.6.0-rc1 | No fix listed |
| moinmoin | = 1.6.0-rc2 | No fix listed |
| moinmoin | = 1.6.1 | No fix listed |
| moinmoin | = 1.6.2 | No fix listed |
| moinmoin | = 1.6.3 | No fix listed |
| moinmoin | = 1.6.4 | No fix listed |
| moinmoin | = 1.7.0 | No fix listed |
| moinmoin | = 1.7.0-beta1 | No fix listed |
| moinmoin | = 1.7.0-beta2 | No fix listed |
| moinmoin | = 1.7.0-rc1 | No fix listed |
| moinmoin | = 1.7.0-rc2 | No fix listed |
| moinmoin | = 1.7.0-rc3 | No fix listed |
| moinmoin | = 1.7.1 | No fix listed |
| moinmoin | = 1.7.2 | No fix listed |
| moinmoin | = 1.8.0 | No fix listed |
| moinmoin | = 1.8.1 | No fix listed |
| moinmoin | = 1.8.2 | No fix listed |
| moinmoin | = 1.8.3 | No fix listed |
| moinmoin | = 1.8.4 | No fix listed |
| moinmoin | = 1.8.6 | No fix listed |
| moinmoin | = 1.8.7 | No fix listed |
| moinmoin | = 1.9.0 | No fix listed |
| moinmoin | = 1.9.1 | No fix listed |
| moinmoin | = 1.9.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com
- web.archive.org
- web.archive.org
- bugs.debian.org
- hg.moinmo.in
- hg.moinmo.in
- hg.moinmo.in
- hg.moinmo.in
- hg.moinmo.in
- hg.moinmo.in
- [oss-security] 20100701 CVE request: moin multiple XSS mailing-list
- [oss-security] 20100702 Re: CVE request: moin multiple XSS mailing-list
- moinmo.in exploit patch
- moinmo.in
- moinmo.in
- moinmo.in vendor-advisory
- DSA-2083 vendor-advisory
- 40549 exploit vdb-entry
- ADV-2010-1981 vdb-entry vendor-advisory
- 40836 third-party-advisory vendor-advisory
- github.com vendor-advisory