CVE-2021-33038

An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...

openSUSE: Security Advisory for python-HyperKitty (openSUSE-SU-2021:0861-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : python-HyperKitty (openSUSE-2021-861)

This update for python-HyperKitty fixes the following issues : - CVE-2021-33038 boo1186575, information disclosure when importing a private mailing list %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

OPENSUSE-SU-2021:0861-1 Security update for python-HyperKitty

This update for python-HyperKitty fixes the following issues: - CVE-2021-33038 boo1186575, information disclosure when importing a private mailing list...

Security update for python-HyperKitty (moderate)

openSUSE Security Update: Security update for python-HyperKitty Announcement ID: openSUSE-SU-2021:0861-1 Rating: moderate References: 1186575 Cross-References: CVE-2021-33038 CVSS scores: CVE-2021-33038 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 A...

Debian DSA-4922-1 : hyperkitty - security update

Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict the visibility of private archives during the import, i.e. that during the import of a private Mailman 2 archive the archive was publicly...

[SECURITY] [DSA 4922-1] hyperkitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4922-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 29, 2021 https://www.debian.org/security/faq -...

CVE-2021-33038

An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...

CVE-2021-33038

CVE-2021-33038 affects HyperKitty prior to 1.3.5: when importing a private mailing-list archive via management/commands/hyperkitty_import.py, archives are publicly visible during the import, potentially exposing sensitive information. Documented in multiple advisories; affected software is HyperK...