Hyperkitty Project Hyperkitty vulnerabilities

1 known vulnerability affecting hyperkitty_project/hyperkitty.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-33038HIGHCVSS 7.5≤ 1.3.42021-05-26

CVE-2021-33038 [HIGH] CWE-276 CVE-2021-33038: An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. Whe An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during a large migration from Mailman 2 to Mailman 3.