CVE-2017-5934: XSS
Published Oct 11, 2018
·Updated
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
10 affected componentsFixes available
debian/moin
pip/moin<1.9.10
1.9.10
MoinMo MoinMoin<1.9.10
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Debian Debian Linux=8.0
Debian Debian Linux=9.0
openSUSE Leap=15.0
openSUSE Leap=42.3
Remediation
Event History
Oct 11, 2018
Data Sourced
05:21 AM
SeverityAffected Software
Oct 15, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Jan 4, 2019
Advisory Published
via GitHub·05:46 PM
Jan 11, 2024
Data Sourced
via Launchpad·10:38 PM
Description
Oct 9, 2024
Data Sourced
via Ubuntu·07:58 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5934?
CVE-2017-5934 has been classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2017-5934?
To fix CVE-2017-5934, upgrade MoinMoin to version 1.9.10 or later.
3
Which versions of MoinMoin are affected by CVE-2017-5934?
MoinMoin versions prior to 1.9.10 are affected by CVE-2017-5934.
4
Can CVE-2017-5934 be exploited by remote attackers?
Yes, CVE-2017-5934 allows remote attackers to inject arbitrary web scripts or HTML.
5
What platforms are affected by CVE-2017-5934?
CVE-2017-5934 affects various operating systems including Debian, Ubuntu, and openSUSE versions that use MoinMoin prior to 1.9.10.