CVE-2020-15275
2 advisories.
PyPI/moin CVE-2020-15275: high 8.7, EPSS 1.75%
malicious SVG attachment causing stored XSS vulnerability
Action: Upgrade moin to 1.9.11 or later.
pip install moin==1.9.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.11 | - |
Fixed versions
| 1.9.11 |
Sources
- osv: GHSA-4q96-6xhq-ff43
- https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-4q96-6xhq-ff43
- https://nvd.nist.gov/vuln/detail/CVE-2020-15275
- https://github.com/moinwiki/moin-1.9/commit/31de9139d0aabc171e94032168399b4a0b2a88a2
- https://advisory.checkmarx.net/advisory/CX-2020-4285
- https://github.com/moinwiki/moin-1.9
- https://github.com/moinwiki/moin-1.9/releases/tag/1.9.11
- https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2020-241.yaml
- https://pypi.org/project/moin
CVE-2020-15275 · published · modified · JSON
PyPI/moin CVE-2020-15275: unknown, EPSS 1.75%
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's
Action: Upgrade moin to 1.9.11 or later.
pip install moin==1.9.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.11 | - |
Fixed versions
| 1.9.11 |
Sources
- osv: PYSEC-2020-241
- https://github.com/moinwiki/moin-1.9/commit/31de9139d0aabc171e94032168399b4a0b2a88a2
- https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-4q96-6xhq-ff43
- https://github.com/moinwiki/moin-1.9/releases/tag/1.9.11
- https://advisory.checkmarx.net/advisory/CX-2020-4285
CVE-2020-15275 · published · modified · JSON