Skip to content
OpenAdvisories
Unscored USN-4406-1 1 CVE

mailman vulnerability

Published Jun 29, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Mailman incorrectly handled certain inputs.
An attacker could possibly use this issue to inject arbitrary content
in the login page.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS mailman 1:2.1.20-1ubuntu0.6
Ubuntu · 18.04 LTS 18.04:LTS mailman 1:2.1.26-1ubuntu0.3

Vulnerabilities 1

  • Unscored —
    CVE-2020-15011

    GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

    mailman Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-15011