What is GHSA-5fq5-pfv8-mrfv?

GHSA-5fq5-pfv8-mrfv is a security advisory published by GitHub Security Advisories with Medium severity. MoinMoin Cross-site Scripting (XSS) vulnerability

Which CVE IDs does GHSA-5fq5-pfv8-mrfv cover?

GHSA-5fq5-pfv8-mrfv covers the following CVE IDs: CVE-2016-9119. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5fq5-pfv8-mrfv?

GHSA-5fq5-pfv8-mrfv has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-5fq5-pfv8-mrfv?

GHSA-5fq5-pfv8-mrfv affects 1 product, including: pip/moin:\u003c 1.9.8.

GHSA-5fq5-pfv8-mrfvMediumCVSS 6.1

MoinMoin Cross-site Scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

September 26, 2024

🔗 CVE IDs covered (1)

CVE-2016-9119 →

📋 Description

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

pip/moin:< 1.9.8

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2016-9119
https://moinmo.in/SecurityFixes
http://www.debian.org/security/2016/dsa-3715
http://www.ubuntu.com/usn/USN-3137-1
https://web.archive.org/web/20200227212253/http://www.securityfocus.com/bid/94501
https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2017-20.yaml
http://www.securityfocus.com/bid/94501
https://github.com/advisories/GHSA-5fq5-pfv8-mrfv