HyperKitty 信息泄露漏洞

漏洞信息详情

HyperKitty 1.3.4版本及之前版本存在信息泄露漏洞，该漏洞源于当导入私人邮件列表的存档时，这些存档在导入期间是公开可见的。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://gitlab.com/mailman/hyperkitty/-/issues/380

来源:CONFIRM

链接:https://gitlab.com/mailman/hyperkitty/-/issues/380

来源:DEBIAN

链接:https://www.debian.org/security/2021/dsa-4922

来源:MISC

链接:https://techblog.wikimedia.org/2021/06/11/discovering-and-fixing-cve-2021-33038-in-mailman3/

来源:CONFIRM

链接:https://gitlab.com/mailman/hyperkitty/-/commit/9025324597d60b2dff740e49b70b15589d6804fa

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021053002

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1848

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/HyperKitty-information-disclosure-via-Private-Mailing-Import-35565

暂无