GHSA-9gj2-ph57-56f5

Source

https://github.com/advisories/GHSA-9gj2-ph57-56f5

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9gj2-ph57-56f5/GHSA-9gj2-ph57-56f5.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-9gj2-ph57-56f5

Aliases

Published

2022-05-01T17:47:55Z

Modified

2026-07-06T08:11:16Z

Summary

MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

Details

Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Database specific

{
    "cwe_ids": [
        "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-10-17T10:43:32Z",
    "nvd_published_at": "2007-02-13T20:28:00Z",
    "severity": "MODERATE"
}

References

Affected packages

PyPI / moin

Package

Name: moin; View open source insights on deps.dev
Purl: pkg:pypi/moin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.8

Database specific

last_known_affected_version_range

"<= 1.5.7"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9gj2-ph57-56f5/GHSA-9gj2-ph57-56f5.json"