Lucene search
GoogleOSV:ALSA-2021:4826HistoryNov 23, 2021 - 8:17 p.m.
Important: mailman:2.1 security update
2021-11-2320:17:35
Google
osv.dev
11
mailman
security
update
csrf
account takeover
cvss score
software
Mailman is a program used to help manage e-mail discussion lists.
Security Fix(es):
-
mailman: CSRF token bypass allows to perform CSRF attacks and account takeover (CVE-2021-42097)
-
mailman: CSRF token derived from admin password allows offline brute-force attack (CVE-2021-42096)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
altlinux
altlinux
Security fix for the ALT Linux 9 package mailman version 5:2.1.35-alt1
2021-11-06 00:00:00
osv
osv
mailman - security update
2021-10-23 00:00:00
mailman vulnerabilities
2021-10-22 05:47:18
Important: mailman:2.1 security update
2021-11-23 20:17:35
oraclelinux
oraclelinux
mailman:2.1 security update
2021-11-24 00:00:00
mailman security update
2021-12-03 00:00:00
redhat
redhat
(RHSA-2021:4837) Important: mailman:2.1 security update
2021-11-24 08:16:24
(RHSA-2021:4826) Important: mailman:2.1 security update
2021-11-23 20:17:35
(RHSA-2021:4839) Important: mailman:2.1 security update
2021-11-24 08:16:29
nessus
nessus
openSUSE 15 Security Update : mailman (openSUSE-SU-2021:1436-1)
2021-11-03 00:00:00
AlmaLinux 8 : mailman:2.1 (ALSA-2021:4826)
2022-02-09 00:00:00
RHEL 8 : mailman:2.1 (RHSA-2021:4839)
2021-11-29 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2791-1)
2021-10-24 00:00:00
Ubuntu: Security Advisory (USN-5121-1)
2021-10-23 00:00:00
Mailman < 2.1.35 Multiple Vulnerabilities
2021-10-26 00:00:00
ubuntu
ubuntu
Mailman vulnerabilities
2021-10-22 00:00:00
Mailman vulnerabilities
2021-11-01 00:00:00
suse
suse
Security update for mailman (important)
2021-11-02 00:00:00
Security update for mailman (important)
2021-11-05 00:00:00
almalinux
almalinux
Important: mailman:2.1 security update
2021-11-23 20:17:35
freebsd
freebsd
debian
debian
[SECURITY] [DLA 2791-1] mailman security update
2021-10-23 16:53:58
[SECURITY] [DSA 4991-1] mailman security update
2021-10-22 18:24:25
[SECURITY] [DSA 4991-1] mailman security update
2021-10-22 18:24:25
rocky
rocky
mailman:2.1 security update
2021-11-23 20:17:35
cve
cve
CVE-2021-42097
2021-10-21 01:15:06
CVE-2021-42096
2021-10-21 01:15:06
redhatcve
redhatcve
CVE-2021-42096
2021-11-05 10:37:52
CVE-2021-42097
2021-11-05 10:26:01
cvelist
cvelist
CVE-2021-42096
2021-10-21 00:40:34
CVE-2021-42097
2021-10-21 00:45:13
nvd
nvd
CVE-2021-42096
2021-10-21 01:15:06
CVE-2021-42097
2021-10-21 01:15:06
prion
prion
Cross site request forgery (csrf)
2021-10-21 01:15:00
Default credentials
2021-10-21 01:15:00
veracode
veracode
Privilege Escalation
2021-10-25 03:38:35
Privilege Escalation
2021-10-25 03:38:34
ubuntucve
ubuntucve
CVE-2021-42097
2021-10-21 00:00:00
CVE-2021-42096
2021-10-21 00:00:00
debiancve
debiancve
CVE-2021-42097
2021-10-21 01:15:06
CVE-2021-42096
2021-10-21 01:15:06
amazon
amazon
Important: mailman
2022-01-18 21:37:00
centos
centos
mailman security update
2021-12-02 23:53:20