CVE-2018-13796

Description

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Base Score

6.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.503

Vulnerability	OS Platform
SUSE-SU-2019:13924-1(SUSE Linux Enterprise Server 11-SP4 ) mailman-2.1.15-9.6.6.1.i586.rpm	Linux
SUSE-SU-2019:13924-1(SUSE Linux Enterprise Server 11-SP4 ) mailman-2.1.15-9.6.6.1.x86_64.rpm	Linux
(RHSA-2020:1054) mailman security and bug fix update mailman-2.1.15-30.el7.x86_64.rpm	Linux
Web-based mailing list manager (legacy branch) (USN-4348-1) mailman_2.1.20-1ubuntu0.4_i386.deb	Linux
Web-based mailing list manager (legacy branch) (USN-4348-1) mailman_2.1.20-1ubuntu0.4_amd64.deb	Linux
Web-based mailing list manager (legacy branch) (USN-4348-1) mailman_2.1.26-1ubuntu0.1_i386.deb	Linux
Web-based mailing list manager (legacy branch) (USN-4348-1) mailman_2.1.26-1ubuntu0.1_amd64.deb	Linux
(CESA-2020:1054) mailman security and bug fix update mailman-2.1.15-30.el7.x86_64.rpm	Linux

No records found