Mailman Cross-site scripting (XSS) vulnerability

CVE-2003-0038 → GitHub で見る ↗ CVE.org で見る ↗ NVD で見る ↗

説明

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

基本情報

タイプ: reviewed
深刻度: medium
GitHub 上のアドバイザリ: アドバイザリを開く ↗
リポジトリのアドバイザリ: —
ソースコード: 未指定
公開（アドバイザリ）: 2022-04-29 01:25:43 UTC
更新: 2023-09-18 22:38:47 UTC
GitHub レビュー済み: 2023-09-18 22:38:47 UTC
NVD で公開: 2003-02-07

EPSS Score

Score	Percentile
10.63%	92.61%

CVSS Scores

No CVSS scores in this advisory.

Identifiers

Type	Value
GHSA	GHSA-82rm-28q9-435p ↗
CVE	CVE-2003-0038 ↗

CWEs

CWE id	Name
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected packages (1)

Vulnerable version ranges and first patched releases as published by GitHub.

Ecosystem	Package	Vulnerable range	First patched	Vulnerable functions
pip	mailman	< 2.1.1	2.1.1	—

References

cvelogic Threat Intelligence