Lucene search
MitreCVELIST:CVE-2021-42097HistoryOct 21, 2021 - 12:45 a.m.
CVE-2021-42097
2021-10-2100:45:13
mitre
www.cve.org
8
cve-2021-42097
mailman
privilege escalation
csrf_token
csrf attack
account takeover
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).
Related
cve
cve
CVE-2021-42097
2021-10-21 01:15:06
prion
prion
Cross site request forgery (csrf)
2021-10-21 01:15:00
veracode
veracode
Privilege Escalation
2021-10-25 03:38:35
redhatcve
redhatcve
CVE-2021-42097
2021-11-05 10:26:01
nvd
nvd
CVE-2021-42097
2021-10-21 01:15:06
ubuntucve
ubuntucve
CVE-2021-42097
2021-10-21 00:00:00
debiancve
debiancve
CVE-2021-42097
2021-10-21 01:15:06
altlinux
altlinux
Security fix for the ALT Linux 9 package mailman version 5:2.1.35-alt1
2021-11-06 00:00:00
osv
osv
mailman - security update
2021-10-23 00:00:00
Important: mailman:2.1 security update
2021-11-23 20:17:35
mailman vulnerabilities
2021-10-22 05:47:18
oraclelinux
oraclelinux
mailman:2.1 security update
2021-11-24 00:00:00
mailman security update
2021-12-03 00:00:00
redhat
redhat
(RHSA-2021:4837) Important: mailman:2.1 security update
2021-11-24 08:16:24
(RHSA-2021:4826) Important: mailman:2.1 security update
2021-11-23 20:17:35
(RHSA-2021:4838) Important: mailman:2.1 security update
2021-11-24 08:16:27
nessus
nessus
Oracle Linux 8 : mailman:2.1 (ELSA-2021-4826)
2023-09-07 00:00:00
RHEL 8 : mailman:2.1 (RHSA-2021:4837)
2021-11-29 00:00:00
RHEL 8 : mailman:2.1 (RHSA-2021:4826)
2022-09-15 00:00:00
freebsd
freebsd
openvas
openvas
Mailman < 2.1.35 Multiple Vulnerabilities
2021-10-26 00:00:00
Debian: Security Advisory (DLA-2791-1)
2021-10-24 00:00:00
Ubuntu: Security Advisory (USN-5121-1)
2021-10-23 00:00:00
ubuntu
ubuntu
Mailman vulnerabilities
2021-10-22 00:00:00
Mailman vulnerabilities
2021-11-01 00:00:00
suse
suse
Security update for mailman (important)
2021-11-02 00:00:00
Security update for mailman (important)
2021-11-05 00:00:00
almalinux
almalinux
Important: mailman:2.1 security update
2021-11-23 20:17:35
debian
debian
[SECURITY] [DLA 2791-1] mailman security update
2021-10-23 16:53:58
[SECURITY] [DSA 4991-1] mailman security update
2021-10-22 18:24:25
[SECURITY] [DSA 4991-1] mailman security update
2021-10-22 18:24:25
rocky
rocky
mailman:2.1 security update
2021-11-23 20:17:35
amazon
amazon
Important: mailman
2022-01-18 21:37:00
centos
centos
mailman security update
2021-12-02 23:53:20