Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-001Upgrade macOS to the latest versionApply OS X security update 2011-004 | Aug 28, 2015 | Sep 15, 2010 |
| Apple Osx Mailman | — | Upgrade macOS to the latest versionApply OS X security update 2011-001 | Dec 16, 2011 | Sep 15, 2010 |
| Centos_linux | — | Upgrade mailman | Dec 1, 2016 | Sep 15, 2010 |
| Freebsd | — | Upgrade mailman | Dec 10, 2025 | Nov 3, 2010 |
| Oracle_linux | — | Upgrade mailman | Oct 16, 2024 | Sep 15, 2010 |
| Redhat_linux | — | — | Jul 9, 2025 | Sep 9, 2010 |
| Suse | — | Upgrade mailman | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mailman | Nov 8, 2024 | Sep 15, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub