NVD

Id
14509  
Name
CVE-2010-3089  
Description
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-09-15  
Modified Date
2014-02-20  
Seq
2010-3089  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80391 14509 CVE-2010-3089 APPLE-SA-2011-03-21-1  View
80392 14509 CVE-2010-3089 FEDORA-2010-14877  View
80393 14509 CVE-2010-3089 FEDORA-2010-14834  View
80394 14509 CVE-2010-3089 SUSE-SR:2011:009  View
80395 14509 CVE-2010-3089 openSUSE-SU-2011:0424  View
80396 14509 CVE-2010-3089 [mailman-announce] 20100905 Mailman security patch.  View
80397 14509 CVE-2010-3089 [mailman-announce] 20100909 Mailman security patch.  View
80398 14509 CVE-2010-3089 [oss-security] 20100913 CVE Request: mailman  View
80399 14509 CVE-2010-3089 [oss-security] 20100913 Re: CVE Request: mailman  View
80400 14509 CVE-2010-3089 [oss-security] 20100913 Re: CVE Request: mailman  View
80401 14509 CVE-2010-3089 [oss-security] 20100913 Re: CVE Request: mailman  View
80402 14509 CVE-2010-3089 [oss-security] 20100913 Re: CVE Request: mailman  View
80403 14509 CVE-2010-3089 http://support.apple.com/kb/HT4581  View
80404 14509 CVE-2010-3089 DSA-2170  View
80405 14509 CVE-2010-3089 RHSA-2011:0307  View
80406 14509 CVE-2010-3089 RHSA-2011:0308  View
80407 14509 CVE-2010-3089 USN-1069-1  View
80408 14509 CVE-2010-3089 ADV-2010-3271  View
80409 14509 CVE-2010-3089 ADV-2011-0436  View
80410 14509 CVE-2010-3089 ADV-2011-0460  View
80411 14509 CVE-2010-3089 ADV-2011-0542  View
80412 14509 CVE-2010-3089 https://bugzilla.redhat.com/show_bug.cgi?id=631859  View
80413 14509 CVE-2010-3089 https://bugzilla.redhat.com/show_bug.cgi?id=631881  View
80414 14509 CVE-2010-3089 https://launchpad.net/mailman/+milestone/2.1.14rc1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31058 JVNDB-2011-001297 GNU Mailman におけるクロスサイトスクリプティングの脆弱性 GNU Mailman には、リストの情報フィールド、またはリストの記述フィールドに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3089 45669 CVE-2010-3089 14509 3.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001297.html 2011-03-01 2011-06-03 View