Red Hat Security AdvisoryRHSA-2011:0308
mailman security update
Released 2011-03-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) mailman-3:2.1.12-14.el6_0.2
- Red Hat Enterprise Linux Workstation (v. 6) mailman-3:2.1.12-14.el6_0.2
Fixes 2 records
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04248 · Published 2011-02-22 · Fixed CWE-79
Priority LOW 21
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01973 · Published 2010-09-15 · Fixed CWE-79
