Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.

The remote host is affected by the vulnerability described in GLSA-201210-02 (MoinMoin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MoinMoin. Please review       the CVE identifiers referenced below for details.
  Impact :

    These vulnerabilities in MoinMoin allow remote users to inject arbitrary       web script or HTML, to obtain sensitive information and to bypass the       textcha protection mechanism. There are several other unknown impacts and       attack vectors.
  Workaround :

    There is no known workaround at this time.

The MoinMoin developers reports :

Fix XSS in Despam action (CVE-2010-0828)

Fix XSS issues

- by escaping template name in messages

- by fixing other places that had similar issues

- Bug #578801 - CVE-2010-0828 Moin v1.8.7 / v.1.9.2 -- XSS     in Despam action

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Sat Apr 3 2010 Ville-Pekka Vainio <vpivaini AT     cs.helsinki.fi> - 1.8.7-2

    - Fixes CVE-2010-0828 (rhbz#578801)

    - Thu Feb 18 2010 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> - 1.8.7-1

    - Fixed major security issues in miscellaneous parts of       moin

    -       http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANG       ES

    - http://secunia.com/advisories/38444/

    - Fixes rhbz#565604

    - Mon Dec 28 2009 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> - 1.8.6-1

    - 1.8.6, mostly bug fixes

    -       http://hg.moinmo.in/moin/1.8/raw-file/1.8.6/docs/CHANG       ES

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Sat Apr 3 2010 Ville-Pekka Vainio <vpivaini AT     cs.helsinki.fi> - 1.8.7-2

    - Fixes CVE-2010-0828 (rhbz#578801)

    - Thu Feb 18 2010 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> - 1.8.7-1

    - Fixed major security issues in miscellaneous parts of       moin

    -       http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANG       ES

    - http://secunia.com/advisories/38444/

    - Fixes rhbz#565604

    - Mon Dec 28 2009 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> - 1.8.6-1

    - 1.8.6, mostly bug fixes

    -       http://hg.moinmo.in/moin/1.8/raw-file/1.8.6/docs/CHANG       ES

    - Tue Sep 15 2009 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> - 1.8.5-1

    - 1.8.5

    - Includes multiple bug fixes, a new FCKeditor version       and some new features

    -       http://hg.moinmo.in/moin/1.8/raw-file/1.8.5/docs/CHANG       ES

    - Sat Jul 25 2009 Fedora Release Engineering <rel-eng at       lists.fedoraproject.org> - 1.8.4-3

    - Rebuilt for       https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

    - Sun Jul 12 2009 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> 1.8.4-2

    - Remove the filemanager directory from the embedded       FCKeditor, it contains code with know security       vulnerabilities, even though that code couldn't be       invoked when moin was used with the default settings.

  - Fixes rhbz #509924, related to CVE-2009-2265

    - Sat Jun 13 2009 Ville-Pekka Vainio <vpivaini AT       cs.helsinki.fi> 1.8.4-1

    - Update to 1.8.4, http://moinmo.in/MoinMoinRelease1.8       has a list of changes.

  - Includes a security fix for hierarchical ACL (not the     default mode), http://moinmo.in/SecurityFixes has the     details.

  - Drop previous security patches, those are not needed     anymore.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that MoinMoin did not properly sanitize its input when processing Despam actions, resulting in cross-site scripting (XSS) vulnerabilities. If a privileged wiki user were tricked into performing the Despam action on a page with a crafted title, a remote attacker could exploit this to execute JavaScript code.
(CVE-2010-0828)

It was discovered that the TextCha protection in MoinMoin could be bypassed by submitting a crafted form request. This issue only affected Ubuntu 8.10. (CVE-2010-1238).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jamie Strandboge discovered that moin, a python clone of WikiWiki, does not sufficiently sanitize the page name in 'Despam' action, allowing remote attackers to perform cross-site scripting (XSS) attacks.

In addition, this update fixes a minor issue in the 'textcha' protection, it could be trivially bypassed by blanking the 'textcha-question' and 'textcha-answer' form fields.

ID	Name	Product	Family	Severity
62632	GLSA-201210-02 : MoinMoin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
51568	FreeBSD : MoinMoin -- XSS vulnerabilities (4c017345-1d89-11e0-bbee-0014a5e3cda6)	Nessus	FreeBSD Local Security Checks	low
47421	Fedora 13 : moin-1.9.2-2.fc13 (2010-6180)	Nessus	Fedora Local Security Checks	low
47419	Fedora 12 : moin-1.8.7-2.fc12 (2010-6134)	Nessus	Fedora Local Security Checks	low
47409	Fedora 11 : moin-1.8.7-2.fc11 (2010-6012)	Nessus	Fedora Local Security Checks	low
45475	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : moin vulnerabilities (USN-925-1)	Nessus	Ubuntu Local Security Checks	medium
45396	Debian DSA-2024-1 : moin - insufficient input sanitising	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2010-0828

low

Tenable Plugins

high

low

low

low

low

medium

medium