Launchpad.net

CVE 2020-15011

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

CVE-2020-15011 (Candidate) is related to these bugs:

Bug #1877379: Arbitrary Content Injection via the private archive login page.

Summary				In	Importance	Status
	1877379	Arbitrary Content Injection via the private archive login page.		GNU Mailman	Low	Fix Released

See the

CVE page on Mitre.org for more details.