Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2018-0618 CVE-2018-13796

A cross-site scripting vulnerability (XSS) has been discovered in mailman due to the host_name field not being properly validated. A malicious list owner could use this flaw to create a specially crafted list and inject client-side scripts. (CVE-2018-0618) An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site. (CVE-2018-13796)

Source

ALAS2-2020-1536

Amazon Linux 2 Security Advisory: ALAS-2020-1536
Advisory Release Date: 2020-10-22 18:27 Pacific
Advisory Updated Date: 2020-10-22 22:35 Pacific

Severity: Medium

References: CVE-2018-0618 CVE-2018-13796

Issue Overview:

A cross-site scripting vulnerability (XSS) has been discovered in mailman due to the host_name field not being properly validated. A malicious list owner could use this flaw to create a specially crafted list and inject client-side scripts. (CVE-2018-0618)

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site. (CVE-2018-13796)

Affected Packages:

mailman

Issue Correction:
Run yum update mailman to update your system.

New Packages:

aarch64:
    mailman-2.1.15-30.amzn2.aarch64
    mailman-debuginfo-2.1.15-30.amzn2.aarch64

i686:
    mailman-2.1.15-30.amzn2.i686
    mailman-debuginfo-2.1.15-30.amzn2.i686

src:
    mailman-2.1.15-30.amzn2.src

x86_64:
    mailman-2.1.15-30.amzn2.x86_64
    mailman-debuginfo-2.1.15-30.amzn2.x86_64

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2-2020-1536

ALAS2-2020-1536

Vulmon Search

About

Products

Connect