Mailman Cross-site scripting (XSS) vulnerability

보통 4.3CVE-2003-0038 · GHSA-82rm-28q9-435p · PYSEC-2026-657 · Published 07/02/2003 · updated 16/06/2026

요약

CVE-2003-0038은(는) mailman, mailman (gnu)에 영향을 주는 보통 (CVSS 4.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 4.8%, 전체 취약점의 91.9%보다 높음.
조치: 2.1.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
mailman PyPI	`< 2.1.1`	`2.1.1`
mailman gnu	`= 2.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

NVD description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

References

nvd.nist.gov/vuln/detail/CVE-2003-0038 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/11152 · WEB
marc.info · WEB
telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt · WEB
debian.org/security/2004/dsa-436 · WEB
osvdb.org/9205 · WEB
securityfocus.com/bid/6677 · WEB
securitytracker.com/id · WEB
pypi.org/project/mailman · PACKAGE
GitHub Advisory GHSA-82rm-28q9-435p · ADVISORY

mailman의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mailman

PyPI

< 2.1.1

2.1.1

mailman

gnu

= 2.1

No fix yet

Description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

NVD description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

mailman의 다른 취약점

모두 보기 →