CVE-2004-1177
mailman - cross-site scripting, directory traversal
EPSS 1.6%
Description
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
How to fix CVE-2004-1177
To remediate CVE-2004-1177, upgrade the affected package to a fixed version below.
- Debian/mailman—upgrade to 2.0.11-1woody11 or later
- PyPI/mailman—upgrade to 2.1.5 or later
Is CVE-2004-1177 being exploited?
Low — EPSS is 1.6%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 2.0.11-1woody11
- from 0, < 2.1.5