Oval Definition:oval:org.opensuse.security:def:202015275
Revision Date:2022-05-22Version:1
Title:CVE-2020-15275
Description:

MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2020-15275
Mitre CVE-2020-15275
SUSE CVE-2020-15275
openSUSE-SU-2020:1966-1
openSUSE-SU-2020:1998-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
SUSE Package Hub for SUSE Linux Enterprise 15 SP2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • moinmoin-wiki-1.9.11-lp152.3.3.1 is installed
  • AND moinmoin-wiki is signed with openSUSE key
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND moinmoin-wiki-1.9.11-bp152.4.3.1 is installed
  • BACK