|
oss-sec
mailing list archives
CVE request: MoinMoin Wiki (XSS in rss link)
From: Tilmann Haak <tilmann.haak () gmx de>
Date: Sat, 29 Dec 2012 15:37:34 +0100
Hi all,
there is an XSS issue in MoinMoin wiki, version 1.9.5. Function
rsslink() in "theme/__init__.py" does not properly escape the page name
parameter.
Details can be found at: http://moinmo.in/SecurityFixes
A fix is available at: http://hg.moinmo.in/moin/1.9/rev/c98ec456e493
Could you please assign a CVE number?
kind regards,
Tilmann
By Date
By Thread
Current thread:
- CVE request: MoinMoin Wiki (XSS in rss link) Tilmann Haak (Dec 29)
|