Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Mailman 安全漏洞
Vulnerability Description
GNU Mailman是美国GNU社区的一套免费的用于管理电子邮件讨论和电子邮件列表的软件。该软件可与Web项目集成，使用户方便管理邮件订阅帐号，并提供内置归档、自动转发处理、内容过滤和反垃圾过滤器等功能。 GNU Mailman Core 3.3.5之前版本存在安全漏洞，该漏洞源于有权访问REST API的攻击者可以使用定时攻击来确定配置的REST API密码的值，然后进行任意REST API调用。
CVSS Information
N/A
Vulnerability Type
N/A