Lucene search

K
cvelistMitreCVELIST:CVE-2021-44227
HistoryDec 02, 2021 - 2:52 a.m.

CVE-2021-44227

2021-12-0202:52:31
mitre
www.cve.org
9
gnu mailman
csrf
vulnerability
admin request
password
changes

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

44.4%

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.