Lucene search
Redhat.comRH:CVE-2020-12137HistoryApr 30, 2020 - 5:41 p.m.
CVE-2020-12137
2020-04-3017:41:10
redhat.com
access.redhat.com
14
EPSS
0.012
Percentile
85.2%
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.
Related
nessus
nessus
Fedora 31 : 3:mailman (2020-69f2f1d987)
2020-05-14 00:00:00
Oracle Linux 8 : mailman:2.1 (ELSA-2020-4667)
2020-11-12 00:00:00
RHEL 8 : mailman:2.1 (RHSA-2020:4667)
2020-11-04 00:00:00
openvas
openvas
Mailman 2.x < 2.1.30 XSS Vulnerability
2020-04-28 00:00:00
Fedora: Security Advisory for mailman (FEDORA-2020-69f2f1d987)
2020-05-15 00:00:00
Debian: Security Advisory (DLA-2200-1)
2020-05-04 00:00:00
prion
prion
Code injection
2020-04-24 13:15:00
fedora
fedora
[SECURITY] Fedora 31 Update: mailman-2.1.30-1.fc31
2020-05-14 02:29:08
[SECURITY] Fedora 32 Update: mailman-2.1.32-2.fc32
2020-05-15 02:36:53
osv
osv
mailman - security update
2020-05-03 00:00:00
mailman - security update
2020-04-26 00:00:00
mailman vulnerabilities
2021-11-01 11:49:48
cvelist
cvelist
CVE-2020-12137
2020-04-24 12:37:58
veracode
veracode
Cross-Site Scripting (XSS)
2021-11-09 13:50:16
ubuntucve
ubuntucve
CVE-2020-12137
2020-04-24 00:00:00
debiancve
debiancve
CVE-2020-12137
2020-04-24 13:15:11
almalinux
almalinux
Moderate: mailman:2.1 security and bug fix update
2020-11-03 12:25:18
oraclelinux
oraclelinux
mailman:2.1 security and bug fix update
2020-11-10 00:00:00
debian
debian
[SECURITY] [DSA 4664-1] mailman security update
2020-04-26 11:58:16
[SECURITY] [DLA 2200-1] mailman security update
2020-05-03 10:49:39
nvd
nvd
CVE-2020-12137
2020-04-24 13:15:11
redhat
redhat
(RHSA-2020:4667) Moderate: mailman:2.1 security and bug fix update
2020-11-03 12:25:18
cve
cve
CVE-2020-12137
2020-04-24 13:15:11
ubuntu
ubuntu
Mailman vulnerabilities
2020-04-29 00:00:00
Mailman vulnerabilities
2021-11-01 00:00:00
mageia
mageia
Updated mailman packages fix security vulnerability
2020-07-05 11:46:44
suse
suse
Recommended update for mailman (moderate)
2020-10-27 00:00:00
Recommended update for mailman (moderate)
2020-10-22 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1913
2021-07-02 17:27:17