CVE Feed

    Dashboard / CVE / CVE-2011-1058

    CVE-2011-1058

    Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.

    Published:Feb 22, 2011
    Last Modified:Apr 11, 2025
    EPS:Feb 22, 2011
    EPSS Score:0.0061
    CVSS Score:2.6

    Affected Products

    Vendor
    Moinmo
    Product
    Moinmoin

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-15275 (CVSS 8.7) — MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an…
    CVE-2020-25074 (CVSS 9.8) — The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HT…
    CVE-2017-5934 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows r…
    CVE-2016-9119 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows re…
    CVE-2016-7148 (CVSS 6.1) — MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" …
    CVE-2016-7146 (CVSS 6.1) — MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation o…
    CVE-2012-6082 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows…
    CVE-2012-6495 (CVSS 6) — Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (a…
    CVE-2012-6080 (CVSS 6.4) — Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachF…
    CVE-2012-6081 (CVSS 6) — Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidr…

    References

    http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html
    http://moinmo.in/SecurityFixes
    http://secunia.com/advisories/43413
    http://secunia.com/advisories/43665
    http://secunia.com/advisories/50885
    http://www.debian.org/security/2011/dsa-2321
    http://www.securityfocus.com/bid/46476
    http://www.ubuntu.com/usn/USN-1604-1
    http://www.vupen.com/english/advisories/2011/0455
    http://www.vupen.com/english/advisories/2011/0571
    http://www.vupen.com/english/advisories/2011/0588
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65545
    http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html
    http://moinmo.in/SecurityFixes
    http://secunia.com/advisories/43413
    http://secunia.com/advisories/43665
    http://secunia.com/advisories/50885
    http://www.debian.org/security/2011/dsa-2321
    http://www.securityfocus.com/bid/46476
    http://www.ubuntu.com/usn/USN-1604-1
    http://www.vupen.com/english/advisories/2011/0455
    http://www.vupen.com/english/advisories/2011/0571
    http://www.vupen.com/english/advisories/2011/0588
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65545

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High