Moderate severity vulnerability that affects mailman

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-13796 · ADVISORY
• bugs.launchpad.net/mailman/+bug/1780874 · WEB
• GitHub Advisory GHSA-xqvg-xm9m-p2c4 · ADVISORY
• lists.debian.org/debian-lts-announce/2018/07/msg00034.html · WEB
• security.gentoo.org/glsa/201904-10 · WEB
• usn.ubuntu.com/4348-1 · WEB
• mail-archive.com/[email protected]/msg71003.html · WEB
• usn.ubuntu.com/4348-1
• mail-archive.com/mailman-users%40python.org/msg71003.html
• pypi.org/project/mailman · PACKAGE

mailman의 다른 취약점

• CVE-2021-34337보통 6.3An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the valu…
• CVE-2021-44227높음 8.8In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new adm…
• CVE-2004-1177보통 4.3Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script…
• CVE-2004-0412보통 5.0Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
• CVE-2003-0038보통 4.3Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via t…