Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2025-43920 GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows…

Description

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.

Produits et versions touchés

Produit Versions touchées Corrigé en
Mailman 2.1.39 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Mailman

Les 3 CVE de Mailman →
CVE-2025-43919 GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../… 5.8 Moyenne CVE-2025-43921 GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the… 5.3 Moyenne
Suivre cette CVE