Podatność CVE-2018-5950

Podatność CVE-2018-5950

Publikacja: 2018-01-23

Opis:

	Tytuł	Autor	Data
Low	Mailman 2.1.23 Cross Site Scripting	Valerio Alessand...	29.10.2020

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Redhat -> Enterprise linux desktop
Redhat -> Enterprise linux server
Redhat -> Enterprise linux server aus
Redhat -> Enterprise linux server eus
Redhat -> Enterprise linux server tus
Redhat -> Enterprise linux workstation
GNU -> Mailman
Debian -> Debian linux
Canonical -> Ubuntu linux

http://www.securityfocus.com/bid/104594

https://access.redhat.com/errata/RHSA-2018:0504

https://access.redhat.com/errata/RHSA-2018:0505

https://bugs.launchpad.net/mailman/+bug/1747209

https://lists.debian.org/debian-lts-announce/2018/02/msg00007.html

https://usn.ubuntu.com/3563-1/

https://www.debian.org/security/2018/dsa-4108

https://www.mail-archive.com/mailman-users@python.org/msg70375.html