CVE-2003-0038
mailman - several vulnerabilities
EPSS 10.6%
Description
Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.
How to fix CVE-2003-0038
To remediate CVE-2003-0038, upgrade the affected package to a fixed version below.
- Debian/mailman—upgrade to 2.0.11-1woody7 or later
- PyPI/mailman—upgrade to 2.1.1 or later
Is CVE-2003-0038 being exploited?
Moderate — EPSS is 10.6%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 2.0.11-1woody7
- from 0, < 2.1.1