Red Hat Security Advisory

RHSA-2020:1054

mailman security and bug fix update

Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) mailman-3:2.1.15-30.el7
Red Hat Enterprise Linux Workstation (v. 7) mailman-3:2.1.15-30.el7

Fixes 2 records

TI-2018-10008 CVE-2018-13796 · GHSA-xqvg-xm9m-p2c4

An issue was discovered in GNU Mailman before 2.1.28.

LOW 34

An issue was discovered in GNU Mailman before 2.1.28.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0253 Published 2018-07-12 Partial fix · 2.1.28 CWE-20

TI-2018-00573 CVE-2018-0618 · GHSA-66w8-h82c-2m79

Cross-site scripting in GNU Mailman Mailman

LOW 28

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02048 Published 2018-07-26 Partial fix CWE-79