CVE-2008-0780: XSS
Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.
Other sources
Description of problem:
The following fix was commited to 1.5 branch in upstream repository: http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7
"XSS fix for login action, thanks to Fernando Quintero for reporting this"
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0780?
The severity of CVE-2008-0780 is considered moderate due to the potential for cross-site scripting attacks.
How do I fix CVE-2008-0780?
To fix CVE-2008-0780, upgrade MoinMoin to version 1.6.1 or later.
Which versions of MoinMoin are affected by CVE-2008-0780?
CVE-2008-0780 affects MoinMoin versions 1.5.x up to and including 1.5.8, and 1.6.x before 1.6.1.
What type of vulnerability is CVE-2008-0780?
CVE-2008-0780 is a cross-site scripting (XSS) vulnerability.
Can CVE-2008-0780 allow remote attackers to execute malicious scripts?
Yes, CVE-2008-0780 allows remote attackers to inject arbitrary web script or HTML via the login action.