Home > Vulnerability Database > CVE-2010-3089

Mend.io Vulnerability Database

CVE-2010-3089

Date: September 15, 2010

Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.

Severity Score

3.1

Related Resources (34)

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html

Url: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Url: https://launchpad.net/mailman/+milestone/2.1.14rc1

Url: http://www.redhat.com/support/errata/RHSA-2011-0307.html

Url: https://access.redhat.com/security/cve/CVE-2010-3089

Url: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Url: http://support.apple.com/kb/HT4581

Url: http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html

Url: http://www.redhat.com/support/errata/RHSA-2011-0308.html

Url: http://www.vupen.com/english/advisories/2011/0436

Url: http://secunia.com/advisories/43580

Url: http://secunia.com/advisories/43549

Url: http://www.debian.org/security/2011/dsa-2170

Url: http://www.vupen.com/english/advisories/2010/3271

Url: http://secunia.com/advisories/43425

Url: http://marc.info/?l=oss-security&m=128441369020123&w=2

Url: http://secunia.com/advisories/41265

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-3089

Url: http://marc.info/?l=oss-security&m=128440851513718&w=2

Url: http://marc.info/?l=oss-security&m=128441135117819&w=2

Url: http://www.ubuntu.com/usn/USN-1069-1

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=631881

Url: https://bugzilla.redhat.com/show_bug.cgi?id=631859

Url: http://secunia.com/advisories/43294

Url: http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html

Url: http://secunia.com/advisories/42502

Url: http://marc.info/?l=oss-security&m=128438736513097&w=2

Url: http://marc.info/?l=oss-security&m=128441237618793&w=2

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-3089

Url: http://www.vupen.com/english/advisories/2011/0460

Url: http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html

Url: http://www.vupen.com/english/advisories/2011/0542

Url: https://www.mend.io/vulnerability-database/CVE-2010-3089

Severity Score

3.1

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

CVSS v3.1

Base Score:	3.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	3.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	SINGLE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-3089

Date: September 15, 2010

Severity Score

Related Resources (34)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?