Medium severity6.5NVD Advisory· Published Jul 12, 2018· Updated Jun 17, 2026
CVE-2018-13796
CVE-2018-13796
Description
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
mailmanPyPI | < 2.1.28 | 2.1.28 |
Affected products
19- ghsa-coords18 versionspkg:pypi/mailmanpkg:rpm/suse/mailman&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/mailman&distro=SUSE%20OpenStack%20Cloud%207
< 2.1.28+ 17 more
- (no CPE)range: < 2.1.28
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
Patches
Vulnerability mechanics
References
9- bugs.launchpad.net/mailman/+bug/1780874nvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-xqvg-xm9m-p2c4ghsaADVISORY
- lists.debian.org/debian-lts-announce/2018/07/msg00034.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-13796ghsaADVISORY
- security.gentoo.org/glsa/201904-10nvdThird Party AdvisoryWEB
- usn.ubuntu.com/4348-1ghsaWEB
- www.mail-archive.com/[email protected]/msg71003.htmlghsaWEB
- usn.ubuntu.com/4348-1/nvd
- www.mail-archive.com/mailman-users%40python.org/msg71003.htmlnvd
News mentions
0No linked articles in our index yet.