MoinMoin Cross-site Scripting (XSS) vulnerability

中 6.1CVE-2016-7146 · GHSA-fj26-q4vh-85f6 · PYSEC-2016-30 · 10/11/2016 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
moin PyPI	`≥ 1.9.8, < 1.9.9< 1.9.9`	`1.9.9`
moinmoin moinmo	`= 1.9.8`	修正版なし

概要

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.

NVD の説明

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.

参考情報

nvd.nist.gov/vuln/detail/CVE-2016-7146 · ADVISORY
moinwiki/moin · PACKAGE
pypa/advisory-database · WEB
web.archive.org/web/20200227212542/http://www.securityfocus.com/bid/94259 · WEB
web.archive.org/web/20200426045730/https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html · WEB
debian.org/security/2016/dsa-3715 · WEB
ubuntu.com/usn/USN-3137-1 · WEB
securityfocus.com/bid/94259
curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html · Exploit
GitHub Advisory GHSA-fj26-q4vh-85f6 · ADVISORY

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン

パッケージ

影響を受けるバージョン

修正済みバージョン

moin

PyPI

≥ 1.9.8, < 1.9.9< 1.9.9

1.9.9

moinmoin

moinmo

= 1.9.8

修正版なし

概要

NVD の説明

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.