The default permissions for Endymion MailMan allow local users to read email or modify files.
6.7AI Score
0.0004EPSS
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
7.7AI Score
0.082EPSS
Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
7.1AI Score
0.01EPSS