CVE-2017-5934 Moderate severity vulnerability that affects moin
MediumCVSS 6.1
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi moin(PyPI) | < 1.9.10 | 1.9.10 |
| pypi moin(PyPI) | = 1.8.4 | No fix listed |
| pypi moin(PyPI) | = 1.8.5 | No fix listed |
| pypi moin(PyPI) | = 1.8.6 | No fix listed |
| pypi moin(PyPI) | = 1.8.7 | No fix listed |
| pypi moin(PyPI) | = 1.9.0 | No fix listed |
| pypi moin(PyPI) | = 1.9.1 | No fix listed |
| pypi moin(PyPI) | = 1.9.2 | No fix listed |
| pypi moin(PyPI) | = 1.9.3 | No fix listed |
| pypi moin(PyPI) | = 1.9.4 | No fix listed |
| pypi moin(PyPI) | = 1.9.5 | No fix listed |
| pypi moin(PyPI) | = 1.9.6 | No fix listed |
| pypi moin(PyPI) | = 1.9.7 | No fix listed |
| pypi moin(PyPI) | = 1.9.8 | No fix listed |
| pypi moin(PyPI) | = 1.9.9 | No fix listed |
| moinmoin | < 1.9.10 | 1.9.10 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
| openSUSE leap | = 42.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com product
- github.com
- [debian-lts-announce] 20181015 [SECURITY] [DLA 1546-1] moin security update mailing-list third-party-advisory
- USN-3794-1 third-party-advisory vendor-advisory
- DSA-4318 third-party-advisory vendor-advisory
- openSUSE-SU-2018:3105 mailing-list third-party-advisory vendor-advisory
- moinmo.in release-notes vendor-advisory
- github.com vendor-advisory