Red Hat Security AdvisoryRHSA-2018:0505
mailman security update
Released 2018-03-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) mailman-3:2.1.15-26.el7_4.1
- Red Hat Enterprise Linux Workstation (v. 7) mailman-3:2.1.15-26.el7_4.1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) mailman-3:2.1.15-26.el7_4.1
Fixes 1 record
Priority LOW 35
Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.04569 · Published 2018-01-23 · Partial fix CWE-79
