CVE-2018-5950
Fixed in a distro release EPSS 5%
Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.
Products: gnu mailman, debian_linux, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | mailman | 3:2.1.15-26.amzn2.1 |
| Debian 7 | mailman | 1:2.1.15-1+deb7u3 |
| Debian 8 | mailman | 1:2.1.18-2+deb8u2 |
| Debian 9 | mailman | 1:2.1.23-1+deb9u2 |
| Red Hat Enterprise Linux 6 | mailman | 3:2.1.12-26.el6_9.3 |
| Red Hat Enterprise Linux 6 | mailman-debuginfo | 3:2.1.12-26.el6_9.3 |
| Red Hat Enterprise Linux 7 | mailman | 3:2.1.15-26.el7_4.1 |
| Red Hat Enterprise Linux 7 | mailman-debuginfo | 3:2.1.15-26.el7_4.1 |
| SUSE Enterprise Storage 4 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 11 SP4 | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP2-BCL | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP3 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP4 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12-LTSS | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | mailman | 2.1.17-3.3.3 |
| SUSE OpenStack Cloud 7 | mailman | 2.1.17-3.3.3 |
| Ubuntu 14.04 LTS | mailman | 1:2.1.16-2ubuntu0.5 |
| Ubuntu 16.04 LTS | mailman | 1:2.1.20-1ubuntu0.3 |