Search for packages
| purl | pkg:pypi/moin@1.9.9 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2020-67
Aliases: CVE-2020-25074 GHSA-52q8-877j-gghq |
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who … |
Vulnerable |
|
PYSEC-2020-241
Aliases: CVE-2020-15275 GHSA-4q96-6xhq-ff43 |
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file … |
Vulnerable |
|
PYSEC-2018-47
Aliases: CVE-2017-5934 GHSA-42fp-4hm3-j8r7 |
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject … |
Vulnerable |
|
PYSEC-2009-11
Aliases: CVE-2008-6548 GHSA-jhxw-4hw4-mhh7 |
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2016-30
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related … |
CVE-2016-7146
GHSA-fj26-q4vh-85f6 |
|
PYSEC-2016-31
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross … |
CVE-2016-7148
GHSA-3x76-j3jj-439j |
|
GHSA-fj26-q4vh-85f6
|
MoinMoin Cross-site Scripting (XSS) vulnerability MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation … |
CVE-2016-7146
|