Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/moin@1.6.3
purl pkg:pypi/moin@1.6.3
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-q7q4-5g8p-33fq
Aliases:
CVE-2008-3381
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in `macro/AdvancedSearch.py` in moin (and MoinMoin) 1.6.3 and 1.7.0 … There are no reported fixed by versions.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-rqxp-6926-hphr
MoinMoin vulnerable to privilege escalation The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty … CVE-2008-1937
PYSEC-2008-12
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly … CVE-2008-1937
GHSA-rqxp-6926-hphr
PYSEC-2009-13
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote … CVE-2008-6603
GHSA-wc8w-gh5m-62fv