CVE-2008-0781: XSS
Description of problem:
The following fix was commited to 1.5 branch in upstream repository: http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef
"fix XSS issues in AttachFile action"
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. The issue was fixed on db212dfc58ef.
— GitHub
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What are the impact details of CVE-2008-0781?
CVE-2008-0781 exposes multiple cross-site scripting (XSS) vulnerabilities in the AttachFile action of the MoinMoin wiki software.
How do I fix CVE-2008-0781?
To address CVE-2008-0781, upgrade to MoinMoin version 1.5.9 or later, as it contains the necessary security fix.
What versions of MoinMoin are affected by CVE-2008-0781?
CVE-2008-0781 affects MoinMoin versions 1.5.8 and earlier, as well as several versions from 0.1 to 1.5.8.
What is the severity level of CVE-2008-0781?
CVE-2008-0781 is classified as a medium severity vulnerability due to the potential for exploitation via XSS.
What actions can be taken to mitigate CVE-2008-0781?
In addition to upgrading MoinMoin, ensure proper input validation and sanitization on web forms to help mitigate CVE-2008-0781.