Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin)
    1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
    (CVE-2008-3381)

Update moin to 1.6.4. Fix the following CVEs: CVE-2008-0781 (again), CVE-2008-3381, CVE-2009-0260, CVE-2009-0312. Fix AttachFile escaping problems, upstream 1.7 changeset 5f51246a4df1 backported.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
432053	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Cloud Security	SCA Checks	Local	medium
432053	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
432013	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Cloud Security	SCA Checks	Local	medium
432013	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
37870	Fedora 10 : moin-1.6.4-1.fc10 (2009-3868)	Nessus	Fedora Local Security Checks	Local	medium
36211	Fedora 9 : moin-1.6.4-1.fc9 (2009-3845)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2008-3381

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium