CVE-2018-0618
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated...
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2018-0618- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2018-0618- Updated
- 2026-11-02
EUVDEUVD-2018-1428 No score
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
EUVD-2018-1428- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-66w8-h82c-2m79
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated...
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
GHSA-66w8-h82c-2m79- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVRHSA-2020:1054
Red Hat Security Advisory: mailman security and bug fix update
- Record
RHSA-2020:1054- CVSS 3.0
- 4.8 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-0618
Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
UBUNTU-CVE-2018-0618- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2018-0313 No score
Updated mailman packages fix security vulnerability
It was discovered that mailman version prior to 2.1.27 contained a vulnerability where malicious list owners could inject evil scripts into listinfo pages (CVE-2018-0618).
- Record
MGASA-2018-0313- Updated
- 2026-11-02
OSVSUSE-SU-2018:4296-1 No score
Security update for mailman
This update for mailman fixes the following security vulnerabilities:
- Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950)
- Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775)
- Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618)
- Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288)
- Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)
- Record
SUSE-SU-2018:4296-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:13924-1 No score
Security update for mailman
This update for mailman fixes the following issues:
- Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950)
- Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775)
- Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618)
- Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288)
- Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)
- Record
SUSE-SU-2019:13924-1- Updated
- 2026-11-02
OSVUSN-4348-1 No score
mailman vulnerabilities
It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this to issue execute arbitrary scripts or HTML. (CVE-2018-0618)
It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to display arbitrary text on a web page. (CVE-2018-13796)
It was discovered that Mailman incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-12137)
- Record
USN-4348-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mailmanDebian:8 From an advisory covering 2 CVEs |
before 1:2.1.18-2+deb8u3, plus listed versions 1:2.1.18-21:2.1.18-2+deb8u11:2.1.18-2+deb8u2 |
1:2.1.18-2+deb8u3 |
mailmanDebian:9 |
before 1:2.1.23-1+deb9u3, plus listed versions 1:2.1.23-11:2.1.23-1+deb9u11:2.1.23-1+deb9u2 |
1:2.1.23-1+deb9u3 |
mailmanMageia:6 |
before 2.1.27-1.mga6 | 2.1.27-1.mga6 |
mailmanRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 3:2.1.15-30.el7 | 3:2.1.15-30.el7 |
mailman-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 3:2.1.15-30.el7 | 3:2.1.15-30.el7 |
mailmanRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 3:2.1.15-30.el7 | 3:2.1.15-30.el7 |
mailman-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 3:2.1.15-30.el7 | 3:2.1.15-30.el7 |
mailmanSUSE:OpenStack Cloud 7 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mailmanSUSE:Linux Enterprise Server 12-LTSS From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Enterprise Storage 4 From an advisory covering 5 CVEs |
before 2.1.17-3.3.3 | 2.1.17-3.3.3 |
mailmanSUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 5 CVEs |
before 2.1.15-9.6.6.1 | 2.1.15-9.6.6.1 |
mailmanSUSE:Linux Enterprise Server 11 SP3-LTSS From an advisory covering 5 CVEs |
before 2.1.15-9.6.6.1 | 2.1.15-9.6.6.1 |
mailmanSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 5 CVEs |
before 2.1.15-9.6.6.1 | 2.1.15-9.6.6.1 |
mailmanSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 5 CVEs |
before 2.1.15-9.6.6.1 | 2.1.15-9.6.6.1 |
mailmanSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 5 CVEs |
before 2.1.15-9.6.6.1 | 2.1.15-9.6.6.1 |
mailmanUbuntu:16.04:LTS |
before 1:2.1.20-1ubuntu0.4, plus listed versions 1:2.1.20-11:2.1.20-1ubuntu0.11:2.1.20-1ubuntu0.3 |
1:2.1.20-1ubuntu0.4 |
mailmanUbuntu:18.04:LTS |
before 1:2.1.26-1ubuntu0.1, plus listed versions 1:2.1.23-11:2.1.24-11:2.1.25-11:2.1.26-1 |
1:2.1.26-1ubuntu0.1 |
mailmanUbuntu:16.04:LTS From an advisory covering 3 CVEs |
before 1:2.1.20-1ubuntu0.4, plus listed versions 1:2.1.20-11:2.1.20-1ubuntu0.11:2.1.20-1ubuntu0.3 |
1:2.1.20-1ubuntu0.4 |
mailmanUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 1:2.1.26-1ubuntu0.1, plus listed versions 1:2.1.23-11:2.1.24-11:2.1.25-11:2.1.26-1 |
1:2.1.26-1ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-0618 is a medium vulnerability (CVSS 5.4) in Gnu Mailman, published July 11, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.05%, the 81st percentile. Fixed in mailman 1:2.1.23-1+deb9u3.
References
mail.python.org/pipermail/mailman-announce/2018-June/000236.html
debian.org/security/2018/dsa-4246
lists.debian.org/debian-lts-announce/2018/07/msg00034.html
jvn.jp/en/jp/JVN00846677/index.html
security.gentoo.org/glsa/201904-10
usn.ubuntu.com/4348-1
Show 35 moreShow less
nvd.nist.gov/vuln/detail/CVE-2018-0618
github.com/advisories/GHSA-66w8-h82c-2m79
advisories.mageia.org/MGASA-2018-0313.html
bugs.mageia.org/show_bug.cgi?id=23256
lists.opensuse.org/opensuse-updates/2018-06/msg00147.html
people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-0618.html
access.redhat.com/errata/RHSA-2020:1054
bugzilla.redhat.com/show_bug.cgi?id=1596458
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1054.json
cve.org/CVERecord?id=CVE-2018-0618
suse.com/support/update/announcement/2018/suse-su-20184296-1
bugzilla.suse.com/1077358
ubuntu.com/security/CVE-2018-0618
launchpad.net/mailman/+milestone/2.1.27
tenable.com/plugins/nessus/110691