CVE-2004-1177: GNU Mailman

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.

Affected products

• GNU Mailman: version 1.0 only; version 1.1 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; …

Published 2005-01-10. Last modified 2026-06-16.