From 496f9bd482ecedec9c178f7c858b3debc8276eca Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 1 May 2024 10:57:18 +0000 Subject: [PATCH] Publish GHSA-m9j7-xcj7-42j9 --- .../GHSA-m9j7-xcj7-42j9.json | 77 +++++++++++-------- 1 file changed, 44 insertions(+), 33 deletions(-) rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json (53%) diff --git a/advisories/unreviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json b/advisories/github-reviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json similarity index 53% rename from advisories/unreviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json rename to advisories/github-reviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json index 352522d0315..735f93fa737 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json +++ b/advisories/github-reviewed/2022/05/GHSA-m9j7-xcj7-42j9/GHSA-m9j7-xcj7-42j9.json @@ -1,17 +1,36 @@ { "schema_version": "1.4.0", "id": "GHSA-m9j7-xcj7-42j9", - "modified": "2022-05-17T02:01:10Z", + "modified": "2024-05-01T10:56:06Z", "published": "2022-05-17T02:01:10Z", "aliases": [ "CVE-2011-1058" ], - "details": "Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when \"format rst\" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.", + "summary": "MoinMoin Cross-site Scripting (XSS) vulnerability", + "details": "Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in `parser/text_rst.py` in MoinMoin before 1.9.3, when docutils is installed or when \"format rst\" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "moin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.9.3" + } + ] + } + ] + } ], "references": [ { @@ -22,6 +41,26 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65545" }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20140720123341/http://secunia.com/advisories/50885" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20140721222129/http://secunia.com/advisories/43665" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20140802163629/http://secunia.com/advisories/43413" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20201202035105/http://www.securityfocus.com/bid/46476" + }, + { + "type": "WEB", + "url": "http://hg.moinmo.in/moin/1.9/rev/97208f67798f" + }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html" @@ -38,41 +77,13 @@ "type": "WEB", "url": "http://moinmo.in/SecurityFixes" }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/43413" - }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/43665" - }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/50885" - }, { "type": "WEB", "url": "http://www.debian.org/security/2011/dsa-2321" }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/46476" - }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-1604-1" - }, - { - "type": "WEB", - "url": "http://www.vupen.com/english/advisories/2011/0455" - }, - { - "type": "WEB", - "url": "http://www.vupen.com/english/advisories/2011/0571" - }, - { - "type": "WEB", - "url": "http://www.vupen.com/english/advisories/2011/0588" } ], "database_specific": { @@ -80,8 +91,8 @@ "CWE-79" ], "severity": "LOW", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-05-01T10:56:06Z", "nvd_published_at": "2011-02-22T18:00:00Z" } } \ No newline at end of file