CVE-2021-34337
2 advisories.
PyPI/mailman CVE-2021-34337: medium 6.3, EPSS 0.30%
Mailman Core vulnerable to timing attacks
Action: Upgrade mailman to 3.3.5 or later.
pip install mailman==3.3.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.5 | - |
Fixed versions
| 3.3.5 |
Sources
- osv: GHSA-2jg5-xgvv-4wq7
- https://nvd.nist.gov/vuln/detail/CVE-2021-34337
- https://github.com/pypa/advisory-database/tree/main/vulns/mailman/PYSEC-2023-22.yaml
- https://gitlab.com/mailman/mailman
- https://gitlab.com/mailman/mailman/-/commit/e4a39488c4510fcad8851217f10e7337a196bb51
- https://gitlab.com/mailman/mailman/-/issues/911
- https://gitlab.com/mailman/mailman/-/tags
CVE-2021-34337 · published · modified · JSON
PyPI/mailman CVE-2021-34337: unknown, EPSS 0.30%
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Action: Upgrade mailman to 3.3.5 or later.
pip install mailman==3.3.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.5 | - |
Fixed versions
| 3.3.5 |
Sources
- osv: PYSEC-2023-22
- https://gitlab.com/mailman/mailman/-/commit/e4a39488c4510fcad8851217f10e7337a196bb51
- https://gitlab.com/mailman/mailman/-/tags
- https://gitlab.com/mailman/mailman/-/issues/911
- https://github.com/advisories/GHSA-2jg5-xgvv-4wq7
CVE-2021-34337 · published · modified · JSON