ALINUX2-SA-2020%3A0057

ALINUX2-SA-2020%3A0057 PUBLISHED CVSS 4.800000190734863 MEDIUM

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-0618: Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. CVE-2018-13796: An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

Risk Scores

CVSS 3.0

4.800000190734863

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
Alibaba Cloud	mailman

Timeline

Apr 2, 2020 CVE Published
Apr 2, 2020 CVE Updated

References

ALINUX2-SA-2020:0057: mailman security and bug fix update (Moderate) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0618 advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13796 advisory

Open in Interactive Console →