Summary
It was discovered that MoinMoin incorrectly handled certain inputs.
An attacker could possibly use this issue to access sensitive information.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | moin | 1.9.7-1ubuntu2.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | moin | 1.9.8-1ubuntu1.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | moin | 1.9.9-1ubuntu1.1 |
Vulnerabilities 1
-
Medium 6.1
Moderate severity vulnerability that affects moin
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
-
report
https://ubuntu.com/security/CVE-2017-5934