CVE-2018-5950

MEDIO 6.1CVE-2018-5950 · Published 23/01/2018 · updated 17/06/2026

In breve

CVE-2018-5950 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda mailman (gnu).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.6%, superiore al 91.6% delle vulnerabilità.
Correzione: aggiornare a 2.1.26 o successiva.

Package	Affected versions	Patched versions
mailman gnu	`< 2.1.26`	`2.1.26`

Description

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

References

packetstormsecurity.com/files/159761/Mailman-2.1.23-Cross-Site-Scripting.html · Exploit
securityfocus.com/bid/104594 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:0504 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:0505 · Third Party Advisory
bugs.launchpad.net/mailman/+bug/1747209 · Issue Tracking
lists.debian.org/debian-lts-announce/2018/02/msg00007.html · Mailing List
usn.ubuntu.com/3563-1 · Third Party Advisory
debian.org/security/2018/dsa-4108 · Third Party Advisory
mail-archive.com/mailman-users%40python.org/msg70375.html

Altre vulnerabilità di mailman

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mailman

gnu

< 2.1.26

2.1.26

Altre vulnerabilità di mailman

Vedi tutto →