CVE-2018-13796 Moderate severity vulnerability that affects mailman
MediumCVSS 6.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi mailman(PyPI) | < 2.1.28 | 2.1.28 |
| pypi mailman(PyPI) | = 3.0.0b3- | No fix listed |
| GNU mailman | < 2.1.28 | 2.1.28 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.launchpad.net issue-tracking third-party-advisory
- github.com vendor-advisory
- [debian-lts-announce] 20180724 [SECURITY] [DLA 1442-1] mailman security update mailing-list third-party-advisory
- GLSA-201904-10 third-party-advisory vendor-advisory
- USN-4348-1 vendor-advisory
- www.mail-archive.com
- pypi.org product
- [mailman-users] 20180710 Re: correction: Mailman 2.1.28 Security fix release mailing-list