Every CVE Search/ Get API key

CVE-2018-5950

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote...

6.1 MediumFix available

CVE-2018-5950 is a medium vulnerability (CVSS 6.1) in Gnu Mailman, published January 23, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.57%, the 91st percentile. Fixed in mailman 1:2.1.15-1+deb7u3.

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

4.57%Up 1.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Record
CVE-2018-5950
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Record
CVE-2018-5950
Updated
2026-11-02
EUVDEUVD-2018-17717 No score

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Record
EUVD-2018-17717
Updated
2026-11-03
GitHub AdvisoriesGHSA-224g-q27w-pv8f 6.1

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote...

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Record
GHSA-224g-q27w-pv8f
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVRHSA-2018:0504 6.1

Red Hat Security Advisory: mailman security update

Record
RHSA-2018:0504
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2018:0505 6.1

Red Hat Security Advisory: mailman security update

Record
RHSA-2018:0505
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2018-5950 6.1

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.

Record
UBUNTU-CVE-2018-5950
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVMGASA-2018-0184 No score

Updated mailman packages fix a security vulnerability

Updated mailman package fixes security vulnerability:

Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed to a list with a private roster (CVE-2018-5950).

Record
MGASA-2018-0184
Updated
2026-11-02
OSVSUSE-SU-2018:4296-1 No score

Security update for mailman

This update for mailman fixes the following security vulnerabilities:

  • Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950)
  • Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775)
  • Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618)
  • Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288)
  • Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)
Record
SUSE-SU-2018:4296-1
Updated
2026-11-02
OSVSUSE-SU-2019:13924-1 No score

Security update for mailman

This update for mailman fixes the following issues:

  • Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950)
  • Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775)
  • Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618)
  • Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288)
  • Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)
Record
SUSE-SU-2019:13924-1
Updated
2026-11-02
OSVUSN-3563-1 No score

mailman vulnerability

It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code.

Record
USN-3563-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mailman
Debian:7
 before 1:2.1.15-1+deb7u3, plus listed versions
1:2.1.15-11:2.1.15-1+deb7u11:2.1.15-1+deb7u2
1:2.1.15-1+deb7u3
mailman
Debian:8
 before 1:2.1.18-2+deb8u2, plus listed versions
1:2.1.18-21:2.1.18-2+deb8u1
1:2.1.18-2+deb8u2
mailman
Debian:9
 before 1:2.1.23-1+deb9u2, plus listed versions
1:2.1.23-11:2.1.23-1+deb9u1
1:2.1.23-1+deb9u2
mailman
Mageia:6
 before 2.1.23-2.1.mga6
2.1.23-2.1.mga6
mailman
Red Hat:enterprise_linux:6::server
 before 3:2.1.12-26.el6_9.3
3:2.1.12-26.el6_9.3
mailman-debuginfo
Red Hat:enterprise_linux:6::server
 before 3:2.1.12-26.el6_9.3
3:2.1.12-26.el6_9.3
mailman
Red Hat:enterprise_linux:6::workstation
 before 3:2.1.12-26.el6_9.3
3:2.1.12-26.el6_9.3
mailman-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 3:2.1.12-26.el6_9.3
3:2.1.12-26.el6_9.3
mailman
Red Hat:enterprise_linux:7::server
 before 3:2.1.15-26.el7_4.1
3:2.1.15-26.el7_4.1
mailman-debuginfo
Red Hat:enterprise_linux:7::server
 before 3:2.1.15-26.el7_4.1
3:2.1.15-26.el7_4.1
Show 21 moreShow less
Affected packages
PackageAffectedFixed
mailman
Red Hat:enterprise_linux:7::workstation
 before 3:2.1.15-26.el7_4.1
3:2.1.15-26.el7_4.1
mailman-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 3:2.1.15-26.el7_4.1
3:2.1.15-26.el7_4.1
mailman
SUSE:OpenStack Cloud 7
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server 12-LTSS
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server 12 SP3
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server 12 SP4
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Enterprise Storage 4
 before 2.1.17-3.3.3
2.1.17-3.3.3
mailman
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 2.1.15-9.6.6.1
2.1.15-9.6.6.1
mailman
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 2.1.15-9.6.6.1
2.1.15-9.6.6.1
mailman
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 2.1.15-9.6.6.1
2.1.15-9.6.6.1
mailman
SUSE:Linux Enterprise Server 11 SP4
 before 2.1.15-9.6.6.1
2.1.15-9.6.6.1
mailman
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 2.1.15-9.6.6.1
2.1.15-9.6.6.1
mailman
Ubuntu:14.04:LTS
 before 1:2.1.16-2ubuntu0.5, plus listed versions
1:2.1.16~rc2-11:2.1.16-11:2.1.16-21:2.1.16-2ubuntu0.11:2.1.16-2ubuntu0.21:2.1.16-2ubuntu0.3
1:2.1.16-2ubuntu0.5
mailman
Ubuntu:16.04:LTS
 before 1:2.1.20-1ubuntu0.3, plus listed versions
1:2.1.20-11:2.1.20-1ubuntu0.1
1:2.1.20-1ubuntu0.3

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 28 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open