Mailman < 2.1.26 XSS Vulnerability

Mailman is prone to a cross-site scripting XSS vulnerability in the web UI. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mailman Cross-Site Scripting Vulnerability

Mailman is a set of shareware developed in the Python language that allows you to manage mailing lists.Web UI is one of the web management interfaces. A cross-site scripting vulnerability exists in the Web UI of Mailman versions prior to 2.1.26. A remote attacker can exploit this vulnerability to...

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

CVE-2018-5950

CVE-2018-5950 affects Mailman web UI: a cross-site scripting (XSS) vulnerability that can be triggered via a crafted user-options URL to inject arbitrary script/HTML. Affected: Mailman 2.1.x up to 2.1.25 (before 2.1.26). Impact per sources: remote attacker can execute script in user context; info...

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

CVE-2018-5950

Removed by vendor...

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

UBUNTU-CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

Mailman -- Cross-site scripting (XSS) vulnerability in the web UI

Mark Sapiro reports: An XSS vulnerability in the user options CGI could allow a crafted URL to execute arbitrary javascript in a user's browser. A related issue could expose information on a user's options page without requiring login...

Ubuntu: Security Advisory (USN-3118-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Mailman vulnerabilities (USN-3118-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3118-1 advisory. It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery CSRF attacks. If an...

USN-3118-1: Mailman vulnerabilities

It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery CSRF attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could perform administrative actions. This issue on...

USN-3118-1 mailman vulnerabilities

It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery CSRF attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could perform administrative actions. This issue on...

MGASA-2016-0343 Updated mailman package fixes security vulnerability

Cross-site request forgery CSRF vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account...

Updated mailman package fixes security vulnerability

Cross-site request forgery CSRF vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account...

Security fix for the ALT Linux 9 package mailman version 5:2.1.23-alt0.1.20160915

Sept. 24, 2016 Konstantin Lepikhov 5:2.1.23-alt0.1.20160915 - LP shapshot 20160916. - Security fixes: + CVE-2016-6893: Extend CSRF protection to user options page...

Debian DSA-3668-1 : mailman - security update

It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user's password. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 3668-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3668-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst September 15, 2016 https://www.debian.org/security/faq -...