Debian/mailman3: medium 6.3
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Action: Upgrade mailman3 to 3.3.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.7-1 | - |
Fixed versions
| 3.3.7-1 |
Sources
- osv: DEBIAN-CVE-2021-34337#Debian:14/mailman3
- https://security-tracker.debian.org/tracker/CVE-2021-34337
published · modified · JSON