CVE-2010-4339

Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages.

Score

CVSS 2.0 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2011-01-14

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Hypermail (Hypermail-project)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598743