What is GHSA-9gj2-ph57-56f5?

GHSA-9gj2-ph57-56f5 is a security advisory published by GitHub Security Advisories with Medium severity. MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

Which CVE IDs does GHSA-9gj2-ph57-56f5 cover?

GHSA-9gj2-ph57-56f5 covers the following CVE IDs: CVE-2007-0901. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-9gj2-ph57-56f5?

GHSA-9gj2-ph57-56f5 affects 1 product, including: pip/Moin:\u003c= 1.5.7.

GHSA-9gj2-ph57-56f5Medium

MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

October 17, 2023

🔗 CVE IDs covered (1)

CVE-2007-0901 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

🎯 Affected products1

pip/Moin:<= 1.5.7

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2007-0901
http://www.ubuntu.com/usn/usn-423-1
https://moinmo.in/MoinMoinRelease1.5/CHANGES
https://web.archive.org/web/20070214032031/http://secunia.com/advisories/24138/
https://web.archive.org/web/20070227204439/http://secunia.com/advisories/24244/
https://web.archive.org/web/20080516214454/http://www.securityfocus.com/bid/22515
https://github.com/advisories/GHSA-9gj2-ph57-56f5