Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-551s-jjxy-qfer |
| Summary | MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors. |
| Aliases |
| 0 |
|
| 1 |
| alias |
GHSA-977v-29j9-9rxc |
|
| 2 |
|
|
| Fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/moin@1.8.7 |
| purl |
pkg:pypi/moin@1.8.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 4 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 5 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 6 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 7 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 8 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 9 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 10 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 11 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.7 |
|
| 2 |
| url |
pkg:pypi/moin@1.9.2 |
| purl |
pkg:pypi/moin@1.9.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 4 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 5 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 6 |
| vulnerability |
VCID-5dkr-jfqu-4kfq |
|
| 7 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 8 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 9 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 10 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 11 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 12 |
| vulnerability |
VCID-qgm9-pnrw-p3ak |
|
| 13 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
| 14 |
| vulnerability |
VCID-xz41-zzdr-6ycb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.2 |
|
|
| Affected_packages |
| 0 |
| url |
pkg:pypi/moin@1.8.4 |
| purl |
pkg:pypi/moin@1.8.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 9 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 10 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 11 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 12 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 13 |
| vulnerability |
VCID-qcmp-zvgm-8bcm |
|
| 14 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.4 |
|
| 1 |
| url |
pkg:pypi/moin@1.8.5 |
| purl |
pkg:pypi/moin@1.8.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 9 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 10 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 11 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 12 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 13 |
| vulnerability |
VCID-qcmp-zvgm-8bcm |
|
| 14 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.5 |
|
| 2 |
| url |
pkg:pypi/moin@1.8.6 |
| purl |
pkg:pypi/moin@1.8.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 9 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 10 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 11 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 12 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 13 |
| vulnerability |
VCID-qcmp-zvgm-8bcm |
|
| 14 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.8.6 |
|
| 3 |
| url |
pkg:pypi/moin@1.9.0 |
| purl |
pkg:pypi/moin@1.9.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5dkr-jfqu-4kfq |
|
| 9 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 10 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 11 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 12 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 13 |
| vulnerability |
VCID-faws-7xxv-eudq |
|
| 14 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 15 |
| vulnerability |
VCID-qgm9-pnrw-p3ak |
|
| 16 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
| 17 |
| vulnerability |
VCID-xz41-zzdr-6ycb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.0 |
|
| 4 |
|
| 5 |
| url |
pkg:pypi/moin@1.9.1 |
| purl |
pkg:pypi/moin@1.9.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fak-dar5-tuet |
|
| 1 |
| vulnerability |
VCID-1kv8-4wn6-yydy |
|
| 2 |
| vulnerability |
VCID-2yaq-3m4p-q3bu |
|
| 3 |
| vulnerability |
VCID-3fgh-8nmt-2fgp |
|
| 4 |
| vulnerability |
VCID-3z75-azrr-2qac |
|
| 5 |
| vulnerability |
VCID-4fn8-ab2r-23dk |
|
| 6 |
| vulnerability |
VCID-4q2t-yhg6-k3dg |
|
| 7 |
| vulnerability |
VCID-551s-jjxy-qfer |
|
| 8 |
| vulnerability |
VCID-5dkr-jfqu-4kfq |
|
| 9 |
| vulnerability |
VCID-5hn2-1bvq-jfdh |
|
| 10 |
| vulnerability |
VCID-8xsp-chsd-cfhp |
|
| 11 |
| vulnerability |
VCID-9ck2-p7hx-4qex |
|
| 12 |
| vulnerability |
VCID-aduk-vjjh-c3gc |
|
| 13 |
| vulnerability |
VCID-kjqq-u9hy-5yda |
|
| 14 |
| vulnerability |
VCID-qgm9-pnrw-p3ak |
|
| 15 |
| vulnerability |
VCID-tkp3-e758-suhx |
|
| 16 |
| vulnerability |
VCID-xz41-zzdr-6ycb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/moin@1.9.1 |
|
|
| References |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| Weaknesses |
| 0 |
| cwe_id |
937 |
| name |
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013. |
|
| 1 |
| cwe_id |
1035 |
| name |
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017. |
|
|
| Exploits |
|
| Severity_range_score | 7.0 - 8.9 |
| Exploitability | 0.5 |
| Weighted_severity | 8.0 |
| Risk_score | 4.0 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-551s-jjxy-qfer |