Mailman Sensitive Information Disclosure · CVE-2004-0412 · GitHub Advisory Database · GitHub

Mailman Sensitive Information Disclosure

Moderate severity GitHub Reviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Sep 18, 2023

Package

mailman (pip)

Affected versions

< 2.1.5

Patched versions

2.1.5

Description

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.

References

Published by the National Vulnerability Database

Aug 18, 2004

Published to the GitHub Advisory Database Apr 29, 2022

Reviewed Sep 18, 2023

Last updated Sep 18, 2023