Mailman versions 1.x up through 2.1.23 suffer from a cross site scripting vulnerability.
3acd354767ea65719c08384106b042f59668c91d3587059546459b8bc4c33aa3Red Hat Security Advisory 2018-0505-01 - Mailman is a program used to help manage e-mail discussion lists. A cross site scripting vulnerability was addressed.
b12c1c9ccf6d23c1e217981a639de1c960e6d6af441392bdee7a35ec89ae31f7Red Hat Security Advisory 2018-0504-01 - Mailman is a program used to help manage e-mail discussion lists. A cross site scripting issue was addressed.
b172f792a53d55c77097a22d3093d8e3bbaa0130fa1ff2a321b9c720a00d36d2Debian Linux Security Advisory 4108-1 - Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed to a list with a private roster.
9d35d5ad565bca8c1f75bbba0777b61cfc5cb238a65a157dc896ba52dd6acfffUbuntu Security Notice 3563-1 - It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code.
e37262374a510e78ca6ffc4ad02a497378e1f8ea46f377a5a9593c3e43d1581b
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed