Lucene search
GoogleOSV:GHSA-XQ58-69H2-765MHistoryDec 16, 2021 - 3:27 p.m.
Cross Site Request Forgery in mailman
2021-12-1615:27:06
Google
osv.dev
14
gnu mailman
cross site request forgery
admin request
csrf token
list member
moderator
admin password
security vulnerability
EPSS
0.001
Percentile
44.4%
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Related
osv
osv
Important: mailman:2.1 security update
2021-12-02 15:57:01
mailman vulnerability
2021-12-07 17:55:04
Important: mailman:2.1 security update
2021-12-02 15:57:01
prion
prion
Cross site request forgery (csrf)
2021-12-02 03:15:00
rocky
rocky
mailman:2.1 security update
2021-12-02 15:57:01
nessus
nessus
RHEL 8 : mailman:2.1 (RHSA-2021:5080)
2021-12-13 00:00:00
AlmaLinux 8 : mailman:2.1 (ALSA-2021:4916)
2022-02-09 00:00:00
RHEL 8 : mailman:2.1 (RHSA-2021:4915)
2021-12-03 00:00:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2021-12-10 00:41:27
redhat
redhat
(RHSA-2021:5080) Important: mailman:2.1 security update
2021-12-13 08:15:15
(RHSA-2021:5081) Important: mailman:2.1 security update
2021-12-13 08:15:19
(RHSA-2021:4915) Important: mailman:2.1 security update
2021-12-02 15:56:55
oraclelinux
oraclelinux
mailman:2.1 security update
2021-12-02 00:00:00
mailman security update
2021-12-03 00:00:00
ubuntu
ubuntu
Mailman vulnerability
2021-12-07 00:00:00
almalinux
almalinux
Important: mailman:2.1 security update
2021-12-02 15:57:01
openvas
openvas
Ubuntu: Security Advisory (USN-5180-1)
2021-12-08 00:00:00
Mailman < 2.1.38 CSRF Vulnerability
2021-12-06 00:00:00
Huawei EulerOS: Security Advisory for mailman (EulerOS-SA-2022-1745)
2022-05-25 00:00:00
redos
redos
ROS-20220125-05
2022-01-25 00:00:00
debiancve
debiancve
CVE-2021-44227
2021-12-02 03:15:06
cvelist
cvelist
CVE-2021-44227
2021-12-02 02:52:31
cve
cve
CVE-2021-44227
2021-12-02 03:15:06
ubuntucve
ubuntucve
CVE-2021-44227
2021-12-02 00:00:00
redhatcve
redhatcve
CVE-2021-44227
2021-12-02 14:19:07
github
github
Cross Site Request Forgery in mailman
2021-12-16 15:27:06
nvd
nvd
CVE-2021-44227
2021-12-02 03:15:06
freebsd
freebsd
debian
debian
[SECURITY] [DLA 3049-1] mailman security update
2022-06-09 10:14:15
centos
centos
mailman security update
2021-12-02 23:53:20
amazon
amazon
Important: mailman
2022-01-18 21:37:00