CVE-2010-2970: XSS

Q: What is the severity of CVE-2010-2970?

CVE-2010-2970 is considered a medium severity vulnerability due to the potential for cross-site scripting attacks.

Q: How do I fix CVE-2010-2970?

To fix CVE-2010-2970, upgrade MoinMoin to version 1.9.3 or later.

Q: Which versions of MoinMoin are affected by CVE-2010-2970?

CVE-2010-2970 affects MoinMoin versions 1.9.0, 1.9.1, and 1.9.2.

Q: Who can exploit CVE-2010-2970?

Remote attackers can exploit CVE-2010-2970 to inject arbitrary web scripts or HTML into affected MoinMoin installations.

Q: What types of scripts can be injected due to CVE-2010-2970?

CVE-2010-2970 allows for the injection of arbitrary web scripts or HTML, facilitating cross-site scripting attacks.

Published Aug 4, 2010

Updated

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/languagesetup.py, a similar issue to CVE-2010-2487.

Affected Software

4 affected componentsFixes available

pip/Moin>=1.9.0<1.9.3

1.9.3

MoinMoin=1.9.0

MoinMoin=1.9.1

MoinMoin=1.9.2

Event History

Aug 4, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

May 17, 2022

Advisory Published

via GitHub·05:49 AM

Frequently Asked Questions

What is the severity of CVE-2010-2970?

CVE-2010-2970 is considered a medium severity vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2010-2970?

To fix CVE-2010-2970, upgrade MoinMoin to version 1.9.3 or later.

Which versions of MoinMoin are affected by CVE-2010-2970?

CVE-2010-2970 affects MoinMoin versions 1.9.0, 1.9.1, and 1.9.2.

Who can exploit CVE-2010-2970?

Remote attackers can exploit CVE-2010-2970 to inject arbitrary web scripts or HTML into affected MoinMoin installations.

What types of scripts can be injected due to CVE-2010-2970?