CVE-2017-5934
published 2018-10-15CVE-2017-5934: Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or…
PriorityP425medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
1.94%
80.0th percentile
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| moinmo | moinmoin | < 1.9.10 | 1.9.10 |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Moderate severity vulnerability that affects moin
ghsa·2019-01-04
CVE-2017-5934 [MEDIUM] CWE-79 Moderate severity vulnerability that affects moin
Moderate severity vulnerability that affects moin
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
OSV
Moderate severity vulnerability that affects moin
osv·2019-01-04
CVE-2017-5934 [MEDIUM] Moderate severity vulnerability that affects moin
Moderate severity vulnerability that affects moin
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
OSV
CVE-2017-5934: Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1
osv·2018-10-15
CVE-2017-5934 CVE-2017-5934: Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Ubuntu
MoinMoin vulnerability
vendor_ubuntu·2018-10-16
CVE-2017-5934 MoinMoin vulnerability
Title: MoinMoin vulnerability
Summary: MoinMoin could be made to expose sensitive information if it
received a specially crafted input.
It was discovered that MoinMoin incorrectly handled certain inputs.
An attacker could possibly use this issue to access sensitive information.
Instructions: In general, a standard system update will make all the necessary changes.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.htmlhttp://moinmo.in/SecurityFixeshttps://github.com/moinwiki/moin-1.9/commit/70955a8eae091cc88fd9a6e510177e70289ec024https://lists.debian.org/debian-lts-announce/2018/10/msg00007.htmlhttps://usn.ubuntu.com/3794-1/https://www.debian.org/security/2018/dsa-4318http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.htmlhttp://moinmo.in/SecurityFixeshttps://github.com/moinwiki/moin-1.9/commit/70955a8eae091cc88fd9a6e510177e70289ec024https://lists.debian.org/debian-lts-announce/2018/10/msg00007.htmlhttps://usn.ubuntu.com/3794-1/https://www.debian.org/security/2018/dsa-4318
2018-10-15
Published