CVE-2003-0992

5 documents5 sources
Severity
4.3MEDIUM
EPSS
0.6%
top 31.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Mailman
Timeline
PublishedFeb 17
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDgnu/mailman2.1.3

Patches

Patch: mail.python.org ↗Patch: www.redhat.com ↗Patch: mail.python.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-rf6p-vch4-w3g7: Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2↗2022-04-29
▶
CVEList
CVE-2003-0992: Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2↗2004-01-15
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2003-09-29
▶

💬Community

1
Bugzilla
CVE-2003-0992 security flaw↗2018-08-16
▶
CVE-2003-0992 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io