CVE:CVE-2018-5950
CNNVD:CNNVD-201801-872
Mailman是一套使用Python语言开发的共享软件，利用它可以管理邮件列表。Web UI是其中的一个Web管理界面。
Mailman 2.1.26之前版本中的Web UI存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade gnu mailman to a higher version than 2.1.26,and avoid the version (,2.1.26); Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,7.6,and avoid the version 7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0