CVE-2020-15011

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.33

Description The issue exists due to insufficient input validation in the Cgi/private.py private archive login page of the GNU Mailman mailing list management system. This allows a remote attacker to inject arbitrary content using a specially crafted request.

Recommendations For GNU Mailman versions prior to 2.1.33, update to version 2.1.33 or later to resolve the issue. As a temporary workaround, consider restricting access to the Cgi/private.py private archive login page to minimize the risk of exploitation.