There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin)
    1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
    (CVE-2008-3381)

Update moin to 1.6.4. Fix the following CVEs: CVE-2008-0781 (again), CVE-2008-3381, CVE-2009-0260, CVE-2009-0312. Fix AttachFile escaping problems, upstream 1.7 changeset 5f51246a4df1 backported.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
432053	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Self-Hosted Container Security	SCA Checks	2025/8/7	2026/7/2	medium
432013	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Self-Hosted Container Security	SCA Checks	2025/8/7	2025/8/7	medium
432053	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Cloud Security	SCA Checks	2025/8/7	2026/7/2	medium
432013	SCA: security update for moin (GHSA-q7q4-5g8p-33fq)	Tenable Cloud Security	SCA Checks	2025/8/7	2025/8/7	medium
36211	Fedora 9 : moin-1.6.4-1.fc9 (2009-3845)	Nessus	Fedora Local Security Checks	2009/4/22	2021/1/11	medium
37870	Fedora 10 : moin-1.6.4-1.fc10 (2009-3868)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium