Описание
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.9.8-1ubuntu2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.9.7-1ubuntu2.1]] |
| esm-infra/xenial | released | 1.9.8-1ubuntu1.16.04.1 |
| precise | released | 1.9.3-1ubuntu2.3 |
| trusty | released | 1.9.7-1ubuntu2.1 |
| trusty/esm | DNE | trusty was released [1.9.7-1ubuntu2.1] |
| upstream | released | 1.9.9 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | released | 1.9.8-1ubuntu1.16.04.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injectio ...
MoinMoin Cross-site Scripting (XSS) vulnerability
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3