{"id":"CVE-2021-33038","details":"An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during a large migration from Mailman 2 to Mailman 3.","aliases":["GHSA-h39g-q63v-4h9p","PYSEC-2021-77"],"modified":"2026-07-08T06:01:18.169724672Z","published":"2021-05-26T14:15:08.913Z","related":["openSUSE-SU-2021:0861-1","openSUSE-SU-2024:11207-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-4922"},{"type":"FIX","url":"https://gitlab.com/mailman/hyperkitty/-/commit/9025324597d60b2dff740e49b70b15589d6804fa"},{"type":"FIX","url":"https://gitlab.com/mailman/hyperkitty/-/issues/380"},{"type":"FIX","url":"https://techblog.wikimedia.org/2021/06/11/discovering-and-fixing-cve-2021-33038-in-mailman3/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/mailman/hyperkitty","events":[{"introduced":"0"},{"last_affected":"5db804b40273026df58679a0ddfaf1e8560ef411"},{"fixed":"9025324597d60b2dff740e49b70b15589d6804fa"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.3.4"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:hyperkitty_project:hyperkitty:*:*:*:*:*:*:*:*"}}],"versions":["1.3.4","1.3.4rc2","1.3.4rc1","1.3.3","1.3.3rc2","1.3.3rc1","1.3.2","v1.3.0","v1.2.2","v1.2.1","v1.1.4","v1.1.3","v1.1.1","v1.1.0","v1.0.3","v1.0.2","v1.0.1","v1.0.0","v1.0.0rc1","v0.9.7","v0.9.6","v0.9.5","v0.9.3","v0.9.2","v0.9.1","v0.1.7","v0.1.6","v0.1.5","v0.1.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33038.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}