PT-2020-13039

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.31 Description The issue allows for Arbitrary Content Injection through the /options/mailman endpoint. Recommendations For GNU Mailman versions prior to 2.1.31, update to version 2.1.31 or later to resolve the...

CVE-2020-12108: Improper Neutralization of Special Elements in Output Used by a Downstream Component

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection...