moin: multiple vulnerabilities
| Package(s): | moin | CVE #(s): | CVE-2010-0668 CVE-2010-0669 CVE-2010-0717 | ||||||||||||
| Created: | March 12, 2010 | Updated: | October 19, 2012 | ||||||||||||
| Description: | From the Debian advisory: CVE-2010-0668: Multiple security issues in MoinMoin related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured. CVE-2010-0669: MoinMoin does not properly sanitize user profiles. CVE-2010-0717: The default configuration of cfg.packagepages_actions_excluded in MoinMoin does not prevent unsafe package actions. | ||||||||||||||
| Alerts: |
| ||||||||||||||