Red Hat Security Advisory

RHSA-2018:0504

mailman security update

Released 2018-03-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) mailman-3:2.1.12-26.el6_9.3
Red Hat Enterprise Linux Workstation (v. 6) mailman-3:2.1.12-26.el6_9.3

Fixes 1 record

TI-2018-04322 CVE-2018-5950 · GHSA-224g-q27w-pv8f

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows…

LOW 35

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04569 Published 2018-01-23 Partial fix CWE-79