Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/06 12:00 a.m.•7 views

CVE-2020-12108: Improper Neutralization of Special Elements in Output Used by a Downstream Component

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection...

6.5CVSS6.9AI score0.02698EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/06 12:00 a.m.•4 views

PT-2020-13039

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.31 Description The issue allows for Arbitrary Content Injection through the /options/mailman endpoint. Recommendations For GNU Mailman versions prior to 2.1.31, update to version 2.1.31 or later to resolve the...

8.8CVSS0.02698EPSS
SaveExploits1References65
Rows per page
Query Builder