Skip to content
OpenAdvisories

Package · Ubuntu

hyperkitty

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.8
    CVE-2021-25322

    python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root

    A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin to root. This issue affects: openSUSE Leap 15.2 python-HyperK…

    openSUSE Factory Leap 15.2 hyperkitty Ubuntu
  • High 7.5
    CVE-2021-33038

    Exposure of sensitive information to an unauthorized actor in HyperKitty

    An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be …

    hyperkitty hyperkitty hyperkitty Debian Ubuntu PyPI