47 matches found
CVE-2021-25322
A UNIX Symbolic Link Symlink Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin to root. This issue affects: openSUSE Leap 15.2 python-HyperKitty version 1.3.2-lp152.2.3.1 and prior...
openSUSE Security Update : python-HyperKitty (openSUSE-2021-861)
This update for python-HyperKitty fixes the following issues : - CVE-2021-33038 boo1186575, information disclosure when importing a private mailing list %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...
openSUSE: Security Advisory for python-HyperKitty (openSUSE-SU-2021:0861-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE openSUSE 安全漏洞
openSUSE is a set of Linux-based free operating systems and open source community projects from SUSE Germany. A security vulnerability exists in openSUSE Leap, which originated after the python-HyperKitty vulnerability in openSUSE Leap 15.2, where Factory allowed escalation of privileges to root...
OPENSUSE-SU-2021:0861-1 Security update for python-HyperKitty
This update for python-HyperKitty fixes the following issues: - CVE-2021-33038 boo1186575, information disclosure when importing a private mailing list...
Security update for python-HyperKitty (moderate)
openSUSE Security Update: Security update for python-HyperKitty Announcement ID: openSUSE-SU-2021:0861-1 Rating: moderate References: 1186575 Cross-References: CVE-2021-33038 CVSS scores: CVE-2021-33038 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 A...
Exposure of sensitive information to an unauthorized actor in HyperKitty
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty prior to 1.3.5. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour durin...
GHSA-H39G-Q63V-4H9P Exposure of sensitive information to an unauthorized actor in HyperKitty
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty prior to 1.3.5. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour durin...
Debian DSA-4922-1 : hyperkitty - security update
Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict the visibility of private archives during the import, i.e. that during the import of a private Mailman 2 archive the archive was publicly...
Debian: Security Advisory (DSA-4922-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4922-1] hyperkitty security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4922-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 29, 2021 https://www.debian.org/security/faq -...
DSA-4922-1 hyperkitty - security update
Bulletin has no description...
Information Disclosure
hyperkitty is vulnerable to information disclosure. The vulnerability exists as private archives are publiclyu visible during imports, leading to information disclosure...
DEBIAN-CVE-2021-33038
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
CVE-2021-33038
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
CVE-2021-33038
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
PYSEC-2021-77
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
Command injection
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
UBUNTU-CVE-2021-33038
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
PYSEC-2021-77
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...