moinwiki/moin-1.9

moinwiki/moin-1.9

Releases58

Frequency3 months 5 days

Last Release over 5 years ago

Stars149

MoinMoin Wiki (1.9, also: 1.5a ... 1.8), stable, for production wikis

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-15275 ↗	Nov 11, 2020Wednesday, 11 November 2020, 16:15	8.7 HIGH	3.5 LOW
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes.
CVE-2020-25074 ↗	Nov 10, 2020Tuesday, 10 November 2020, 17:15	9.8 CRITICAL	7.5 HIGH
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.
CVE-2017-5934 ↗	Oct 15, 2018Monday, 15 October 2018, 19:29	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.