CVE-2010-2969: XSS

Q: What is the severity of CVE-2010-2969?

CVE-2010-2969 has a medium severity rating due to the potential for remote code execution via cross-site scripting exploits.

Q: How do I fix CVE-2010-2969?

To fix CVE-2010-2969, upgrade MoinMoin to version 1.9.3 or later.

Q: Which versions of MoinMoin are affected by CVE-2010-2969?

CVE-2010-2969 affects MoinMoin versions 1.7.3 and earlier, as well as 1.9.x before 1.9.3.

Q: What are the implications of CVE-2010-2969 on my MoinMoin installation?

The implications of CVE-2010-2969 include potential injection of arbitrary web scripts or HTML by attackers.

Q: Is CVE-2010-2969 only a concern for older versions of MoinMoin?

Yes, CVE-2010-2969 is primarily a concern for older versions, specifically those before 1.9.3.

Published Aug 4, 2010

Updated

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) action/userprofile.py, a similar issue to CVE-2010-2487.

Affected Software

69 affected componentsFixes available

pip/moin>=1.9.0<1.9.3

1.9.3

pip/moin<=1.7.3

MoinMoin=1.2.4

MoinMoin=1.3.2

MoinMoin=1.3.5

MoinMoin=1.1

MoinMoin=1.5.0-beta1

MoinMoin=1.2.3

MoinMoin=1.7.2

MoinMoin=1.6.3

MoinMoin=1.7.0-rc3

MoinMoin=1.5.0-beta4

MoinMoin=0.10

MoinMoin=1.5.5

MoinMoin=1.7.0-rc2

MoinMoin=1.5.8

MoinMoin=1.2.2

MoinMoin=1.5.0-beta2

MoinMoin=1.3.1

MoinMoin=1.5.1

MoinMoin=0.5

MoinMoin=1.6.0

MoinMoin=0.7

MoinMoin=1.5.4

MoinMoin=1.5.0-rc1

MoinMoin=0.8

MoinMoin=0.2

MoinMoin=0.4

MoinMoin=1.6.4

MoinMoin=0.1

MoinMoin=1.7.0-beta2

MoinMoin=1.5.3-rc1

MoinMoin=1.3.0

MoinMoin=1.5.3

MoinMoin=0.11

MoinMoin=1.6.0-beta2

MoinMoin=1.0

MoinMoin=1.5.0-beta3

MoinMoin=1.5.3-rc2

MoinMoin=0.6

MoinMoin=1.6.0-rc1

MoinMoin=1.5.6

MoinMoin=1.2.1

MoinMoin=1.6.0-beta1

MoinMoin=1.6.1

MoinMoin=1.5.0-beta5

MoinMoin=0.9

MoinMoin=1.3.5-rc1

MoinMoin=1.5.0-beta6

MoinMoin=1.7.0-rc1

MoinMoin=1.5.5-rc1

MoinMoin=1.7.0-beta1

MoinMoin=1.7.0

MoinMoin=1.3.4

MoinMoin=1.7.1

MoinMoin=1.5.7

MoinMoin=1.5.2

MoinMoin=1.5.5a

MoinMoin=1.2

MoinMoin=1.3.3

MoinMoin<=1.7.3

MoinMoin=1.6.0-rc2

MoinMoin=0.3

MoinMoin=1.5.0

MoinMoin=1.6.2

MoinMoin=1.4

MoinMoin=1.9.0

MoinMoin=1.9.2

MoinMoin=1.9.1

Event History

Aug 4, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

May 17, 2022

Advisory Published

via GitHub·05:49 AM

Frequently Asked Questions

What is the severity of CVE-2010-2969?

CVE-2010-2969 has a medium severity rating due to the potential for remote code execution via cross-site scripting exploits.

How do I fix CVE-2010-2969?

To fix CVE-2010-2969, upgrade MoinMoin to version 1.9.3 or later.

Which versions of MoinMoin are affected by CVE-2010-2969?

CVE-2010-2969 affects MoinMoin versions 1.7.3 and earlier, as well as 1.9.x before 1.9.3.

What are the implications of CVE-2010-2969 on my MoinMoin installation?

The implications of CVE-2010-2969 include potential injection of arbitrary web scripts or HTML by attackers.

Is CVE-2010-2969 only a concern for older versions of MoinMoin?