netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-m9j7-xcj7-42j9

Browse Source
This commit is contained in:
advisory-database[bot]
2024-05-01 10:57:18 +00:00
parent 8e77b8cda6
commit 496f9bd482
1 changed files with 44 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json → advisories/github-reviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json
+44 -33
View File
@@ -1,17 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m9j7-xcj7-42j9",
"modified": "2022-05-17T02:01:10Z",
"modified": "2024-05-01T10:56:06Z",
"published": "2022-05-17T02:01:10Z",
"aliases": [
"CVE-2011-1058"
],
"details": "Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when \"format rst\" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.",
"summary": "MoinMoin Cross-site Scripting (XSS) vulnerability",
"details": "Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in `parser/text_rst.py` in MoinMoin before 1.9.3, when docutils is installed or when \"format rst\" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "moin"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.3"
}
]
}
]
}
],
"references": [
{
@@ -22,6 +41,26 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65545"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20140720123341/http://secunia.com/advisories/50885"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20140721222129/http://secunia.com/advisories/43665"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20140802163629/http://secunia.com/advisories/43413"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20201202035105/http://www.securityfocus.com/bid/46476"
},
{
"type": "WEB",
"url": "http://hg.moinmo.in/moin/1.9/rev/97208f67798f"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html"
@@ -38,41 +77,13 @@
"type": "WEB",
"url": "http://moinmo.in/SecurityFixes"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/43413"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/43665"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50885"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2011/dsa-2321"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/46476"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-1604-1"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2011/0455"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2011/0571"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2011/0588"
}
],
"database_specific": {
@@ -80,8 +91,8 @@
"CWE-79"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-05-01T10:56:06Z",
"nvd_published_at": "2011-02-22T18:00:00Z"
}
}