CVE-2018-13796

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*

History

07 Nov 2023, 02:52

Type Values Removed Values Added
References
  • {'url': 'https://www.mail-archive.com/mailman-users@python.org/msg71003.html', 'name': '[mailman-users] 20180710 Re: correction: Mailman 2.1.28 Security fix release', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • () https://www.mail-archive.com/mailman-users%40python.org/msg71003.html -

Information

Published : 2018-07-12 18:29

Updated : 2024-02-28 16:48


NVD link : CVE-2018-13796

Mitre link : CVE-2018-13796

CVE.ORG link : CVE-2018-13796


JSON object : View

Products Affected

gnu

  • mailman
CWE
CWE-20

Improper Input Validation