CVE-2011-1058

MoinMoin < 1.9.3 - Cross-Site Scripting via reStructuredText refuri Attribute

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.

References (14)

Core 14
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46476
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1604-1
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html
Patch, Vendor Advisory x_refsource_confirm
http://moinmo.in/SecurityFixes
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2321
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0588
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43665
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50885
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0455
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43413
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0571
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65545

Scores

EPSS 0.0252
EPSS Percentile 83.2%

Details

CWE
CWE-79
Status published
Products (36)
moinmo/moinmoin 0.1
moinmo/moinmoin 0.2
moinmo/moinmoin 0.3
moinmo/moinmoin 0.4
moinmo/moinmoin 0.5
moinmo/moinmoin 0.6
moinmo/moinmoin 0.7
moinmo/moinmoin 0.8
moinmo/moinmoin 0.9
moinmo/moinmoin 0.10
... and 26 more
Published Feb 22, 2011
Tracked Since Feb 18, 2026