Skip to content
OpenAdvisories
Unscored USN-3563-1 1 CVE

mailman vulnerability

Published Feb 8, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Mailman incorrectly handled certain web scripts.
An attacker could possibly use this to inject arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS mailman 1:2.1.16-2ubuntu0.5
Ubuntu · 16.04 LTS 16.04:LTS mailman 1:2.1.20-1ubuntu0.3

Vulnerabilities 1

  • Unscored —
    CVE-2018-5950

    Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbit…

    mailman Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-5950