Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
New security notice for the #Ubuntu community: USN-8067-1 patches a CSRF token bypass in Mailman (CVE-2021-44227). Read more: 👉 https://tinyurl.com/542zrwd3 #Security https://t.co/X9HAPpZRZK
Post summary
Ubuntu community released a security notice (USN-8067-1) that patches a CSRF token bypass vulnerability (CVE-2021-44227) in Mailman.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 9.0 | - | - |
| App | gnu | mailman | - | - | - |