suse · CVE-2018-0618

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-0618 severity moderate: SUSE including 5 source package names (mailman-2.1.15-30.el7, mailman-2.1.15-9.6.6.1, mailman-2.1.17-3.3.3, mailman-2.1.17-3.8.1, mailman-2.1.27-lp150.2.3.1), 25 product×package rows across 25 product lines (SUSE Enterprise Storage 4, SUSE Liberty Linux 7, … (25 product lines)): Fixed 25.

Description:

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.