Most recent entries from all

ALSA-2021:4916 — Important: mailman:2.1 security update

Affected: AlmaLinux:8: mailman

Mailman is a program used to help manage e-mail discussion lists.

Security Fix(es):

* mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover (CVE-2021-44227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-00592

EUVD-2026-32859

fkie_cve-2021-44227

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

GHSA-xq58-69h2-765m — Cross Site Request Forgery in mailman

Affected: PyPI: mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

gsd-2021-44227

OESA-2021-1456 — mailman security update

Affected: openEuler:20.03-LTS-SP1: mailman, openEuler:20.03-LTS-SP2: mailman

The GNU mailing list manager. Security Fix(es): In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.(CVE-2021-44227)

PYSEC-2026-660 — Cross Site Request Forgery in mailman

Affected: PyPI: mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

RHSA-2021:4913 — Red Hat Security Advisory: mailman security update

mailman: CSRF protection missing in the user options page mailman: CSRF token bypass allows to perform CSRF attacks and account takeover mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover

RHSA-2021:4915 — Red Hat Security Advisory: mailman:2.1 security update

mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover

SUSE-SU-2022:1886-1 — Security update for mailman

Security update for mailman

UBUNTU-CVE-2021-44227

Affected: Ubuntu:Pro:16.04:LTS: mailman, Ubuntu:18.04:LTS: mailman, Ubuntu:Pro:20.04:LTS: mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

WID-SEC-W-2022-0245 — GNU Mailman: Schwachstelle ermöglicht Privilegieneskalation

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in GNU Mailman ausnutzen, um seine Privilegien zu erhöhen.