VDB
GCVE-110-MAGEIA-2018-184
GCVE-110-MAGEIA-2018-184
Advisory Published
Updated mailman package fixes security vulnerability:
Calum Hutton and the Mailman team discovered a cross site scripting and
information leak vulnerability in the user options page. A remote attacker could
use a crafted URL to steal cookie information or to fish for whether a user is
subscribed to a list with a private roster (CVE-2018-5950).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | mailman | 0 (affected), 2.1.23-2.1.mga6 (unaffected), 0 (affected), 2.1.23-2.1.mga6 (unaffected) | — |
| Mageia | python-attrs | 17.4.0-1.mga6 (unaffected), 0 (affected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.