mailman vulnerabilities (Mageia)

8 vulnerabilities.

• mailman Mageia GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private... CVE-2020-15011 Fix available 4.3 MediumJune 24, 2020
• mailman Mageia /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 Fix available 6.5 MediumMay 6, 2020
• mailman Mageia GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME... CVE-2020-12137 Fix available 6.1 MediumApril 24, 2020
• mailman Mageia Moderate severity vulnerability that affects mailman CVE-2018-13796 Fix available 6.5 MediumJuly 12, 2018
• mailman Mageia Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated... CVE-2018-0618 Fix available 5.4 MediumJuly 11, 2018
• mailman Mageia Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote... CVE-2018-5950 Fix available 6.1 MediumJanuary 23, 2018
• mailman Mageia Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x... CVE-2016-6893 Fix available 8.8 HighSeptember 2, 2016
• mailman Mageia Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,... CVE-2015-2775 Fix available 7.6 HighApril 1, 2015