PyPI/moin CVE-2016-9119: unknown, EPSS 1.46%
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Action: Upgrade moin to 1.9.8 or later.
pip install moin==1.9.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.8 | - |
Fixed versions
| 1.9.8 |
Sources
- osv: PYSEC-2017-20
- https://moinmo.in/SecurityFixes
- http://www.ubuntu.com/usn/USN-3137-1
- http://www.debian.org/security/2016/dsa-3715
- http://www.securityfocus.com/bid/94501
- https://github.com/advisories/GHSA-5fq5-pfv8-mrfv
CVE-2016-9119 · published · modified · JSON