CVE-2016-6893

GNU Mailman 2.1.x contains a CSRF vulnerability (CVE-2016-6893) in the user options page that allows remote attackers to hijack a user’s session and perform option-modifying requests, potentially accessing victim credentials. The root cause is CSRF token protection not being correctly tied to the...

CVE-2016-7123

CVE-2016-7123 is a CSRF vulnerability in the GNU Mailman admin web interface (pre-2.1.15) that can hijack administrator authentication. Exploitation details are provided in connected documents (e.g., Nessus and OSV descriptions) and indicate users are potentially affected across various Linux dis...