CVE-2018-0618

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://jvn.jp/en/jp/JVN00846677/index.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00034.htmlMailing List, Third Party Advisory
• https://mail.python.org/pipermail/mailman-announce/2018-June/000236.htmlMailing List
• https://security.gentoo.org/glsa/201904-10Third Party Advisory
• https://usn.ubuntu.com/4348-1/
• https://www.debian.org/security/2018/dsa-4246Third Party Advisory
• http://jvn.jp/en/jp/JVN00846677/index.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00034.htmlMailing List, Third Party Advisory
• https://mail.python.org/pipermail/mailman-announce/2018-June/000236.htmlMailing List
• https://security.gentoo.org/glsa/201904-10Third Party Advisory
• https://usn.ubuntu.com/4348-1/
• https://www.debian.org/security/2018/dsa-4246Third Party Advisory

Published

Jul 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0610Local file inclusion vulnerability in Zenphoto 1.4.14 and ea…
• CVE-2018-0611The ANA App for iOS version 4.0.22 and earlier does not veri…
• CVE-2018-0612Cross-site scripting vulnerability in 5000 trillion yen conv…6.1
• CVE-2018-0613NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.3…
• CVE-2018-0614Cross-site scripting vulnerability in NEC Platforms Calsos C…
• CVE-2018-0617Directory traversal vulnerability in ChamaNet MemoCGI v2.180…
• CVE-2018-0619Untrusted search path vulnerability in the installer of Glar…
• CVE-2018-0620Untrusted search path vulnerability in LOGICOOL Game Softwar…
• CVE-2018-0621Untrusted search path vulnerability in LOGICOOL CONNECTION U…
• CVE-2018-0622The DHC Online Shop App for Android version 3.2.0 and earlie…
• CVE-2018-0623Untrusted search path vulnerability in Multiple Yayoi 17 Ser…
• CVE-2018-0624Untrusted search path vulnerability in Multiple Yayoi 17 Ser…