PT-2009-2976

CVE-2009-0312

Publicado

2009-01-28

Atualizado

2026-07-02

Descrição por

CVSS 2.0

4.3

Média

MétricasAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.7 through 1.8.1

Description A cross-site scripting (XSS) issue exists in the antispam feature, located in security/antispam.py, allowing remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.

Recommendations For MoinMoin versions 1.7 through 1.8.1, consider disabling the antispam feature until a patch is available. Restrict access to the security/antispam.py module to minimize the risk of exploitation.

Explorabilidade

Correção

Impactos

Pesquisadores

Jamie Strandboge

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Identificadores relacionados

CVE-2009-0312

GHSA-CX94-3H5X-CC57