Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2016-2014

Высокий

ALT-PU-2016-2014: package mailman update to version 2.1.23-alt0.1.20160915

Источник
errata.altlinux.org
Дата публикации
24.09.2016
Дата обновления
24.09.2016
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades mailman to version 2.1.23-alt0.1.20160915.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.

CVSS3: 6.5
redhat
около 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.

CVSS3: 8.8
nvd
около 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.

CVSS3: 8.8
debian
около 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the user options pa ...

suse-cvrf
больше 7 лет назад

Security update for mailman