CVE-2010-3089

N/A Unknown
Published: September 15, 2010 Modified: April 29, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
Source: secalert@redhat.com
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html
Source: secalert@redhat.com
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html
Source: secalert@redhat.com
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
Source: secalert@redhat.com
http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html
Source: secalert@redhat.com
http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html
Source: secalert@redhat.com
http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html
Source: secalert@redhat.com
http://marc.info/?l=oss-security&m=128438736513097&w=2
Source: secalert@redhat.com
http://marc.info/?l=oss-security&m=128440851513718&w=2
Source: secalert@redhat.com
http://marc.info/?l=oss-security&m=128441135117819&w=2
Source: secalert@redhat.com
http://marc.info/?l=oss-security&m=128441237618793&w=2
Source: secalert@redhat.com
http://marc.info/?l=oss-security&m=128441369020123&w=2
Source: secalert@redhat.com
http://secunia.com/advisories/41265
Source: secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/42502
Source: secalert@redhat.com
http://secunia.com/advisories/43294
Source: secalert@redhat.com
http://secunia.com/advisories/43425
Source: secalert@redhat.com
http://secunia.com/advisories/43549
Source: secalert@redhat.com
http://secunia.com/advisories/43580
Source: secalert@redhat.com
http://support.apple.com/kb/HT4581
Source: secalert@redhat.com
http://www.debian.org/security/2011/dsa-2170
Source: secalert@redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0307.html
Source: secalert@redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0308.html
Source: secalert@redhat.com
http://www.ubuntu.com/usn/USN-1069-1
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2010/3271
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2011/0436
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2011/0460
Source: secalert@redhat.com
http://www.vupen.com/english/advisories/2011/0542
Source: secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=631859
Source: secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=631881
Source: secalert@redhat.com
https://launchpad.net/mailman/+milestone/2.1.14rc1
Source: secalert@redhat.com
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=oss-security&m=128438736513097&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=oss-security&m=128440851513718&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=oss-security&m=128441135117819&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=oss-security&m=128441237618793&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=oss-security&m=128441369020123&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/41265
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/42502
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/43294
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/43425
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/43549
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/43580
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.apple.com/kb/HT4581
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2011/dsa-2170
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2011-0307.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2011-0308.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-1069-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2010/3271
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0436
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0460
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0542
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=631859
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=631881
Source: af854a3a-2127-422b-91ae-364da2661108
https://launchpad.net/mailman/+milestone/2.1.14rc1
Source: af854a3a-2127-422b-91ae-364da2661108

60 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.0%
78th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

gnu

Related CVEs

CVE-2026-8662 3.3
CVE-2026-8658 6.0
CVE-2026-8666 7.7
CVE-2026-8665 7.7
CVE-2026-8664 6.0