Description

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

Remediation

References

CVE-2020-15011

Related Vulnerabilities

Joomla Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48901)

XWikiplatform Other Vulnerability (CVE-2024-46978)

Nginx Resource Management Errors Vulnerability (CVE-2016-0747)

Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-12458)

WordPress Plugin WP Munich Blocks-Gutenberg Blocks for WordPress Security Bypass (0.7.2)

Severity

Medium

Classification

CVE-2020-15011 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities