Mailman < 2.1.33 Content Injection Vulnerability

Mailman is prone to a content injection vulnerability via the cgi/private.py private archive login page. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-15011: Improper Neutralization of Special Elements in Output Used by a Downstream Component

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page...

PT-2020-3002

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.33 Description The issue exists due to insufficient input validation in the Cgi/private.py private archive login page of the GNU Mailman mailing list management system. This allows a remote attacker to inject...