CVE-2021-33038 log

Severity Medium
Remote Yes
Type Information disclosure
An issue was discovered in management/commands/ in HyperKitty before version 1.3.5. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during a large migration from Mailman 2 to Mailman 3.
Group Package Affected Fixed Severity Status Ticket
AVG-2003 hyperkitty 1.3.4-2 1.3.5-1 Medium Fixed