mailman vulnerabilities (openEuler)

9 vulnerabilities.

• mailman openEuler Mailman Core vulnerable to timing attacks CVE-2021-34337 Fix available 6.3 MediumOctober 21, 2022
• mailman openEuler Cross Site Request Forgery in mailman CVE-2021-44227 Fix available 8.8 HighDecember 2, 2021
• mailman openEuler In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an... CVE-2021-43332 Fix available 6.5 MediumNovember 12, 2021
• mailman openEuler In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute... CVE-2021-43331 Fix available 6.1 MediumNovember 12, 2021
• mailman openEuler GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not... CVE-2021-42097 Fix available 8.0 HighOctober 21, 2021
• mailman openEuler GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is... CVE-2021-42096 Fix available 4.3 MediumOctober 21, 2021
• mailman openEuler GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private... CVE-2020-15011 Fix available 4.3 MediumJune 24, 2020
• mailman openEuler /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 Fix available 6.5 MediumMay 6, 2020
• mailman openEuler GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME... CVE-2020-12137 Fix available 6.1 MediumApril 24, 2020