REDHAT-BUG-578801: XSS
Jamie Strandboge of the Ubuntu Security Team reported: [1] https://bugs.launchpad.net/ubuntu/+source/moin/+bug/538022
a cross-site scripting (XSS) flaw, present in the Moin's Despam action module, providing possibility mass to revert changes done by some specific author / bot. Unprivileged Moin user could provide a specially-crafted HTML page and trick the privileged user into running the Despam action on it, leading to disclosure of sensitive information, denial of 'revert changes service' or potentially, to execution of arbitrary JavaScript code with the privileges of the privileged Moin user.
References: [2] http://moinmo.in/SecurityFixes [3] http://secunia.com/advisories/39188/
Upstream patch: [4] http://hg.moinmo.in/moin/1.9/rev/6e603e5411ca
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-578801?
The severity of REDHAT-BUG-578801 is classified as moderate due to the potential for cross-site scripting vulnerabilities.
How do I fix REDHAT-BUG-578801?
To fix REDHAT-BUG-578801, update MoinMoin to the latest version that addresses the XSS vulnerability in the Despam action module.
What systems are affected by REDHAT-BUG-578801?
REDHAT-BUG-578801 affects the MoinMoin application, particularly those implementations utilizing the Despam action module.
What type of vulnerability is REDHAT-BUG-578801?
REDHAT-BUG-578801 is classified as a cross-site scripting (XSS) vulnerability.
Who reported the vulnerability REDHAT-BUG-578801?
The vulnerability REDHAT-BUG-578801 was reported by Jamie Strandboge of the Ubuntu Security Team.