CVE-2004-1177

CWE-79 — Cross-site Scripting (XSS)9 documents7 sources
Severity
4.3MEDIUM
EPSS
1.6%
top 18.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Mailman
Timeline
PublishedJan 10
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶PyPImailman< 2.1.5
▶NVDgnu/mailman22 versions+21

Patches

Patch: bugs.debian.org ↗Patch: www.debian.org ↗Patch: bugs.debian.org ↗

🔴Vulnerability Details

3
GHSA
mailman Cross-site scripting (XSS) vulnerability↗2022-04-29
▶
OSV
mailman Cross-site scripting (XSS) vulnerability↗2022-04-29
▶
CVEList
CVE-2004-1177: Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2↗2005-01-19
▶

📋Vendor Advisories

2
Ubuntu
mailman vulnerabilities↗2005-01-11
▶
Red Hat
security flaw↗2005-01-10
▶

💬Community

3
Bugzilla
CVE-2004-1177 security flaw↗2018-08-16
▶
Bugzilla
CVE-2006-0052 Mailman DoS, CVE-2006-1712 Mailman cross site scripting bug and CVE-2005-3573 Mailman Denial of Service (CVE-2005-4153); also CAN-2004-1177 Cross-site scripting (XSS) vulnerability↗2006-06-02
▶
Bugzilla
CVE-2004-1177 mailman↗2005-08-02
▶
CVE-2004-1177 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io