GHSA-53wj-6m7w-j6mj

Source

https://github.com/advisories/GHSA-53wj-6m7w-j6mj

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-53wj-6m7w-j6mj/GHSA-53wj-6m7w-j6mj.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-53wj-6m7w-j6mj

Aliases

CVE-2008-0780
PYSEC-2026-667

Published

2022-05-01T23:33:02Z

Modified

2026-07-06T08:11:22Z

Summary

MoinMoin Cross-site scripting (XSS) vulnerability

Details

Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.

Database specific

{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-05-14T20:41:24Z",
    "nvd_published_at":  "2008-02-14T21:00:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

PyPI / moin

Package

Name: moin; View open source insights on deps.dev
Purl: pkg:pypi/moin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.5

Last Affected

1.5.8

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-53wj-6m7w-j6mj/GHSA-53wj-6m7w-j6mj.json"

PyPI / moin

Package

Name: moin; View open source insights on deps.dev
Purl: pkg:pypi/moin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.6

Fixed

1.6.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-53wj-6m7w-j6mj/GHSA-53wj-6m7w-j6mj.json"