Moderate severity vulnerability that affects moin

MEDIUM 6.1CVE-2017-5934 · GHSA-42fp-4hm3-j8r7 · PYSEC-2018-47 · Published 15/10/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
moin PyPI	`< 1.9.10`	`1.9.10`
moinmoin moinmo	`< 1.9.10`	`1.9.10`

Description

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2017-5934 · ADVISORY
moinwiki/moin-1.9 commit 70955a8 · WEB
moinwiki/moin-1.9 · PACKAGE
pypa/advisory-database · WEB
lists.debian.org/debian-lts-announce/2018/10/msg00007.html · WEB
usn.ubuntu.com/3794-1 · WEB
debian.org/security/2018/dsa-4318 · WEB
lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.html · WEB
moinmo.in/SecurityFixes · WEB
usn.ubuntu.com/3794-1 · Third Party Advisory
GitHub Advisory GHSA-42fp-4hm3-j8r7 · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free