CVE-2020-15011

Description

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

1.332

Vulnerability	OS Platform
Web-based mailing list manager (legacy branch) (USN-4406-1) mailman_2.1.20-1ubuntu0.6_i386.deb	Linux
Web-based mailing list manager (legacy branch) (USN-4406-1) mailman_2.1.20-1ubuntu0.6_amd64.deb	Linux
Web-based mailing list manager (legacy branch) (USN-4406-1) mailman_2.1.26-1ubuntu0.3_i386.deb	Linux
Web-based mailing list manager (legacy branch) (USN-4406-1) mailman_2.1.26-1ubuntu0.3_amd64.deb	Linux
SUSE-SU-2020:2048-1(SUSE Linux Enterprise Server 12-SP5 ) mailman-2.1.17-3.23.1.x86_64.rpm	Linux
SUSE-SU-2020:2048-1(SUSE Linux Enterprise Server 12-SP5 ) mailman-debuginfo-2.1.17-3.23.1.x86_64.rpm	Linux
SUSE-SU-2020:2048-1(SUSE Linux Enterprise Server 12-SP5 ) mailman-debugsource-2.1.17-3.23.1.x86_64.rpm	Linux
(RHSA-2021:1751) mailman:2.1 security update mailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm	Linux
(RHSA-2021:1751) mailman:2.1 security update mailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm	Linux
mailman security update(DSA-4991-1) mailman_2.1.29-1+deb10u2_i386.deb	Linux
mailman security update(DSA-4991-1) mailman_2.1.29-1+deb10u2_amd64.deb	Linux
Web-based mailing list manager (USN-5121-2) mailman_2.1.29-1ubuntu3.1_amd64.deb	Linux

No records found