Skip to content
OpenAdvisories
Unscored USN-4354-1 1 CVE

mailman vulnerability

Published May 11, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Mailman incorrectly handled certain inputs.
An attacker could possibly use this issue to inject arbitrary content
in the login page.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS mailman 1:2.1.20-1ubuntu0.5
Ubuntu · 18.04 LTS 18.04:LTS mailman 1:2.1.26-1ubuntu0.2

Vulnerabilities 1

  • Unscored —
    CVE-2020-12108

    /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

    mailman Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-12108