Moderate severity vulnerability that affects moin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2017-5934 · ADVISORY
• moinwiki/moin-1.9 commit 70955a8 · WEB
• moinwiki/moin-1.9 · PACKAGE
• pypa/advisory-database · WEB
• lists.debian.org/debian-lts-announce/2018/10/msg00007.html · WEB
• usn.ubuntu.com/3794-1 · WEB
• debian.org/security/2018/dsa-4318 · WEB
• lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.html · WEB
• moinmo.in/SecurityFixes · WEB
• usn.ubuntu.com/3794-1 · Third Party Advisory
• GitHub Advisory GHSA-42fp-4hm3-j8r7 · ADVISORY

moin 的其他漏洞

• CVE-2020-15275中危 5.4MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malici…
• CVE-2020-25074严重 9.8The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who ca…
• CVE-2016-9119中危 6.1Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbit…
• CVE-2016-7148中危 6.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross …
• CVE-2016-7146中危 6.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, relat…