mailman Cross-site scripting (XSS) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2004-1177 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/18854 · WEB
• terencehonles/mailman · PACKAGE
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11113 · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• marc.info · WEB
• secunia.com/advisories/13603 · WEB
• debian.org/security/2005/dsa-674 · WEB
• mandriva.com/security/advisories · WEB
• novell.com/linux/security/advisories/2005_07_mailman.html · WEB
• redhat.com/support/errata/RHSA-2005-235.html · WEB
• pypi.org/project/mailman · PACKAGE

More vulnerabilities in mailman

• CVE-2021-34337MEDIUM 6.3An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the valu…
• CVE-2021-44227HIGH 8.8In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new adm…
• CVE-2018-13796MEDIUM 6.5An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted si…
• CVE-2004-0412MEDIUM 5.0Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
• CVE-2003-0038MEDIUM 4.3Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via t…