Approved changes feed: RSS · Atom

cpe:2.3:a:python-hyperkitty_project:python-hyperkitty:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPython Hyperkitty Project (2f005066-46d1-5ec9-8b68-63c07ea676ad)
ProductPython Hyperkitty (c6fd1422-6584-5be3-bb8f-692d8138f039)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/maxking/mailman-web purl2cpe 2026-06-01 10:18:12.918027
pkg:github/hyperkitty/hyperkitty purl2cpe 2026-06-01 10:18:12.918030
pkg:gitlab/mailman/hyperkitty purl2cpe 2026-06-01 10:18:12.918033
pkg:pypi/hyperkitty purl2cpe 2026-06-01 10:18:12.918036
pkg:rpm/fedora/python-hyperkitty purl2cpe 2026-06-01 10:18:12.918038
pkg:rpm/opensuse/python-hyperkitty purl2cpe 2026-06-01 10:18:12.918041

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25322 vulnerable 2026-06-08 05:30:40.666692 python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root
MEDIUM (6.8)
A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin to root. This issue affects: openSUSE Leap 15.2 python-HyperKitty version 1.3.2-lp152.2.3.1 and prior versions. openSUSE Factory python-HyperKitty versions prior to 1.3.4-5.1.
Published: 2021-06-10T11:45:11.776Z
Updated: 2024-09-17T03:02:08.344Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.