CVE-2018-0618 Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 5.4
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU mailman | <= 2.1.26 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| GNU Mailman Mailman | = 2.1.26 and earlier | No fix listed |
References
- JVN#00846677 third-party-advisory
- [debian-lts-announce] 20180724 [SECURITY] [DLA 1442-1] mailman security update mailing-list third-party-advisory
- [mailman-announce] 20180622 Mailman 2.1.27 released mailing-list
- GLSA-201904-10 third-party-advisory vendor-advisory
- USN-4348-1 vendor-advisory
- DSA-4246 third-party-advisory vendor-advisory