Описание
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mailman | fixed | 1:2.1.27-1.1 | package | |
| mailman | fixed | 1:2.1.23-1+deb9u4 | stretch | package |
Примечания
Fixed in 2.1.28; Regression fix in 2.1.29
https://mail.python.org/pipermail/mailman-users/2018-July/083536.html
https://bugs.launchpad.net/mailman/+bug/1780874
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1796
Needs as well a further regression fix as per
https://bugs.launchpad.net/mailman/+bug/1783417
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1798
EPSS
Связанные уязвимости
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
Moderate severity vulnerability that affects mailman
EPSS