CVE-2018-0618

Опубликовано: 26 июл. 2018

Источник: debian

EPSS Низкий

Описание

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
mailman	fixed	1:2.1.27-1		package

Примечания

https://mail.python.org/pipermail/mailman-announce/2018-June/000236.html
https://launchpad.net/mailman/+milestone/2.1.27
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1747
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1754
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1783
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1785

EPSS

Процентиль: 79%

0.02048

Низкий

Связанные уязвимости

CVE-2018-0618

CVSS3: 5.4

ubuntu

около 8 лет назад

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2018-0618

CVSS3: 4.8

redhat

около 8 лет назад

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2018-0618

CVSS3: 5.4

nvd

около 8 лет назад

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

openSUSE-SU-2018:1858-1

suse-cvrf

около 8 лет назад

Security update for mailman

GHSA-66w8-h82c-2m79

CVSS3: 5.4

github

около 4 лет назад

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS

Процентиль: 79%

0.02048

Низкий