Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

moin: cross-site scripting

Package(s):

moin

CVE #(s):

CVE-2009-1482

Created:

May 6, 2009

Updated:

May 11, 2009

Description:

From the Debian advisory:

It was discovered that the AttachFile action in moin, a python clone of WikiWiki, is prone to cross-site scripting attacks when renaming attachements or performing other sub-actions.

Alerts:

Ubuntu	USN-774-1	2009-05-11
Debian	DSA-1791-1	2009-05-06

(Log in to post comments)