Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Mailman Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2021-44227 - Vulnerability Database
Mailman

Mailman Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2021-44227

High
Reference: CVE-2021-44227
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-44227
Title: Mailman Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

In GNU Mailman before 2.1.38 a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.