Описание
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.1.2-3ubuntu0.1 |
| devel | released | 1.3.5-1 |
| esm-apps/bionic | released | 1.1.2-3ubuntu0.1 |
| esm-apps/focal | released | 1.2.4-1ubuntu0.1 |
| esm-apps/jammy | released | 1.3.5-1 |
| esm-infra-legacy/trusty | DNE | |
| focal | released | 1.2.4-1ubuntu0.1 |
| hirsute | released | 1.3.4-1ubuntu0.1 |
| impish | released | 1.3.4-2ubuntu0.1 |
| jammy | released | 1.3.5-1 |
Показывать по
5.5 Medium
CVSS2
5.4 Medium
CVSS3
Связанные уязвимости
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.
An issue was discovered in views/list.py in GNU Mailman Postorius befo ...
5.5 Medium
CVSS2
5.4 Medium
CVSS3