MoinMoin Cross-site Scripting (XSS) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-7146 · ADVISORY
• moinwiki/moin · PACKAGE
• pypa/advisory-database · WEB
• web.archive.org/web/20200227212542/http://www.securityfocus.com/bid/94259 · WEB
• web.archive.org/web/20200426045730/https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html · WEB
• debian.org/security/2016/dsa-3715 · WEB
• ubuntu.com/usn/USN-3137-1 · WEB
• securityfocus.com/bid/94259
• curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html · Exploit
• GitHub Advisory GHSA-fj26-q4vh-85f6 · ADVISORY

moin 的其他漏洞

• CVE-2020-15275中危 5.4MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malici…
• CVE-2020-25074严重 9.8The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who ca…
• CVE-2017-5934中危 6.1Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbi…
• CVE-2016-9119中危 6.1Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbit…
• CVE-2016-7148中危 6.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross …