[Bug 1949401] [NEW] Potential XSS attack via the user options page.
*** This bug is a security vulnerability *** Private security bug reported: A crafted URL to the user options page can execute arbitrary javascript. ** Affects: mailman Importance: Medium Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1949401 Title: Potential XSS attack via the user options page. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1949401/+subscriptions
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-43331 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1949401 Title: Potential XSS attack via the user options page. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1949401/+subscriptions
** Attachment added: "patch_to_fix_1949401" https://bugs.launchpad.net/mailman/+bug/1949401/+attachment/5540165/+files/p... -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1949401 Title: Potential XSS attack via the user options page. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1949401/+subscriptions
** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1949401 Title: Potential XSS attack via the user options page. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1949401/+subscriptions
** Changed in: mailman Status: In Progress => Fix Released ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1949401 Title: Potential XSS attack via the user options page. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1949401/+subscriptions
participants (2)
-
Launchpad Bug Tracker -
Mark Sapiro