CVE-2020-12108: gnu mailman – CVSS 6.5 · Watchpost

← All vulnerabilities

CVE-2020-12108

MEDIO 6.5CVE-2020-12108 · Published 06/05/2020 · updated 17/06/2026

In breve

CVE-2020-12108 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda mailman (gnu), backports sle (opensuse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 85.9% delle vulnerabilità.
Correzione: aggiornare a 2.1.31 o successiva.

Package	Affected versions	Patched versions
mailman gnu	`< 2.1.31`	`2.1.31`
backports sle opensuse	`= 15.0`	No fix yet

Description

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

References

lists.opensuse.org/opensuse-security-announce/2020-05/msg00036.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-06/msg00003.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-10/msg00047.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-10/msg00063.html · Mailing List
bugs.launchpad.net/mailman/+bug/1873722 · Exploit
code.launchpad.net/mailman · Third Party Advisory
lists.debian.org/debian-lts-announce/2020/05/msg00007.html · Third Party Advisory
lists.debian.org/debian-lts-announce/2020/07/msg00007.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74EQIVFB34Q4UYAQLCUWG55YLKAUWCHD
mail.python.org/pipermail/mailman-announce

Altre vulnerabilità di mailman

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free