Mailman Cross-site scripting (XSS) vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2003-0038 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/11152 · WEB
• marc.info · WEB
• telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt · WEB
• debian.org/security/2004/dsa-436 · WEB
• osvdb.org/9205 · WEB
• securityfocus.com/bid/6677 · WEB
• securitytracker.com/id · WEB
• pypi.org/project/mailman · PACKAGE
• GitHub Advisory GHSA-82rm-28q9-435p · ADVISORY

mailman のその他の脆弱性

• CVE-2021-34337中 6.3An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the valu…
• CVE-2021-44227高 8.8In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new adm…
• CVE-2018-13796中 6.5An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted si…
• CVE-2004-1177中 4.3Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script…
• CVE-2004-0412中 5.0Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.