Cross-site Scripting Vulnerability in Mailman by Python Software Foundation
CVE-2018-0618

5.4MEDIUM

Key Information:

Vendor: Gnu Mailman
Status: Mailman
Vendor: CVE Published:; 26 July 2018

🔔 Create Gnu Mailman Vulnerability Alert

What is CVE-2018-0618?

A cross-site scripting vulnerability exists in Mailman versions prior to 2.1.27. This vulnerability permits remote authenticated attackers to inject arbitrary web scripts or HTML, potentially leading to unauthorized actions on behalf of other users or data exfiltration. Attackers can exploit this vulnerability through unspecified vectors, posing significant risks to the integrity of affected mailing lists.