Описание
Security update for mailman
This update for mailman fixes the following issues:
Security issue fixed:
- CVE-2018-5950: Fixed XSS vulnerability via crafted URL that could allow arbitrary javascript execution inside the user's browser (boo#1077358).
Список пакетов
openSUSE Leap 42.3
mailman-2.1.26-2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2018:0800-1
- SUSE Security Ratings
Описание
Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.
Затронутые продукты
openSUSE Leap 42.3:mailman-2.1.26-2.3.1
Ссылки
- CVE-2018-5950
- SUSE Bug 1077358