CVE-2020-15011: Medium severity cpanel gnu mailman vulnerability
Published Jun 24, 2020
·Updated
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
Affected Software
7 affected components
debian/mailman
GNU Mailman<2.1.33
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Jun 24, 2020
CVE Published
via MITRE·11:34 AM
Data Sourced
via MITRE·11:34 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:42 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:23 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-15011?
CVE-2020-15011 is a vulnerability in GNU Mailman before version 2.1.33 that allows arbitrary content injection via the Cgi/private.py private archive login page.
2
How severe is CVE-2020-15011?
CVE-2020-15011 has a severity level of 4.3 (medium).
3
Which software versions are affected by CVE-2020-15011?
GNU Mailman versions before 2.1.33 are affected.
4
How can I fix CVE-2020-15011?
Upgrade to GNU Mailman version 2.1.33 or later.
5
Where can I find more information about CVE-2020-15011?
For more information about CVE-2020-15011, you can visit the following references: [Link 1](https://bugs.launchpad.net/mailman/+bug/1877379), [Link 2](https://lists.debian.org/debian-lts-announce/2020/06/msg00036.html), [Link 3](https://usn.ubuntu.com/4406-1/)