Mailman Sensitive Information Disclosure

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2004-0412 · ADVISORY
• bugzilla.redhat.com/bugzilla/show_bug.cgi · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/16256 · WEB
• gitlab.com/mailman · WEB
• distro.conectiva.com.br/atualizacoes · WEB
• mail.python.org/pipermail/mailman-announce/2004-May/000072.html · WEB
• marc.info · WEB
• secunia.com/advisories/11701 · WEB
• security.gentoo.org/glsa/glsa-200406-04.xml · WEB
• mandrakesecure.net/en/advisories/advisory.php · WEB
• securityfocus.com/bid/10412 · WEB
• pypi.org/project/mailman · PACKAGE
• GitHub Advisory GHSA-hj4h-vqpq-95wg

mailman のその他の脆弱性

• CVE-2021-34337中 6.3An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the valu…
• CVE-2021-44227高 8.8In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new adm…
• CVE-2018-13796中 6.5An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted si…
• CVE-2004-1177中 4.3Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script…
• CVE-2003-0038中 4.3Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via t…