All errata/sisyphus/ALT-PU-2019-1010-2
ALT-PU-2019-1010-2

Package update mailman in branch sisyphus

Version2.1.29-alt1
Task#219026
Published2026-02-04
Max severityMEDIUM
Severity:

Closed issues (3)

CVE-2018-0618
MEDIUM5.4

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: 2018-07-26Modified: 2024-11-21
CVSS 2.0LOW 3.5
CVSS:2.0/AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS 3.xMEDIUM 5.4
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
CVE-2018-13796
MEDIUM6.5

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Published: 2018-07-12Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
References
GHSA-xqvg-xm9m-p2c4
MEDIUM6.5

Moderate severity vulnerability that affects mailman

Published: 2018-09-11Modified: 2021-09-22
CVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
References