CVE-2018-5950

Опубликовано: 23 янв. 2018

Источник: debian

Описание

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
mailman	fixed	1:2.1.26-1		package

Примечания

https://mail.python.org/pipermail/mailman-users/2018-February/083011.html
Patch: https://launchpadlibrarian.net/355686141/options.patch
https://bugs.launchpad.net/mailman/+bug/1747209

Связанные уязвимости

CVE-2018-5950

CVSS3: 6.1

ubuntu

почти 8 лет назад

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

CVE-2018-5950

CVSS3: 6.1

redhat

почти 8 лет назад

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

CVE-2018-5950

CVSS3: 6.1

nvd

почти 8 лет назад

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

openSUSE-SU-2018:0800-1

suse-cvrf

больше 7 лет назад

Security update for mailman

GHSA-224g-q27w-pv8f

CVSS3: 6.1

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.