VDB
CVE-2002-0855
CVE-2002-0855
PUBLISHED
CVSS 7.5 HIGH
Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.
EPSS 6.11% · 93.2th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
6.11%
93.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| gnu | mailman | 2.0.12 |
Timeline
- Aug 14, 2002 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
References
- 20020724 cross-site scripting bug of Mailman mailing-list
- 5298 vdb
- RHSA-2002:176 vendor-advisory
- CLA-2002:522 vendor-advisory
- RHSA-2002:177 vendor-advisory
- http://www.debian.org/security/2002/dsa-147 technical
- http://mail.python.org/pipermail/mailman-announce/2002-July/000043.html patch
- https://nvd.nist.gov/vuln/detail/CVE-2002-0855 advisory
- http://www.iss.net/security_center/static/9985.php url
- http://www.redhat.com/support/errata/RHSA-2002-178.html url
- http://www.redhat.com/support/errata/RHSA-2002-181.html url