CVE-2003-0965

5 documents5 sources
Severity
6.8MEDIUM
EPSS
3.1%
top 13.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Mailman
Timeline
PublishedFeb 17
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDgnu/mailman2.1.4

Patches

Patch: mail.python.org ↗Patch: www.redhat.com ↗Patch: mail.python.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-m48m-qqmr-226c: Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2↗2022-04-29
▶
CVEList
CVE-2003-0965: Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2↗2004-01-15
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2003-12-31
▶

💬Community

1
Bugzilla
CVE-2003-0965 security flaw↗2018-08-16
▶
CVE-2003-0965 (MEDIUM CVSS 6.8) | Cross-site scripting (XSS) vulnerab | cvebase.io