{"id":"CVE-2021-42097","aliases":["ALSA-2021:4826","DLA-2791-1","DSA-4991-1","EUVD-2021-29083","GHSA-vj65-f4hc-r425","OESA-2021-1405","RHSA-2021:4826","RHSA-2021:4837","RHSA-2021:4838","RHSA-2021:4839","RHSA-2021:4913","RLSA-2021:4826","UBUNTU-CVE-2021-42097","USN-5121-1","USN-5121-2","openSUSE-SU-2021:1436-1","openSUSE-SU-2021:1452-1"],"status":"published","title":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not...","description":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01332,"percentile":0.71475,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-352"],"published":"2021-10-21T00:00:00Z","modified":"2026-10-29T11:01:11Z","fixes":[{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","fixed_in":["1:2.1.20-1ubuntu0.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mailman","fixed_in":["1:2.1.26-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"mailman","fixed_in":["1:2.1.29-1ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module_el8.5.0+26+48d4c9ee.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module_el8.5.0+2601+e8845b76.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module_el8.5.0+2602+327eb9f3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.23-1+deb9u7"}]}],"versions":["1:2.1.23-1","1:2.1.23-1+deb9u1","1:2.1.23-1+deb9u2","1:2.1.23-1+deb9u3","1:2.1.23-1+deb9u4","1:2.1.23-1+deb9u5","1:2.1.23-1+deb9u6"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1+deb10u2"}]}],"versions":["1:2.1.29-1","1:2.1.29-1+deb10u1"],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.29-8.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.29-8.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+13211+e8845b76.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+13211+e8845b76.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+13211+e8845b76.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-4.module+el8.2.0+13241+705a6aa4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-4.module+el8.2.0+13241+705a6aa4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-4.module+el8.2.0+13241+705a6aa4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-4.module+el8.1.0+13242+45286865.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-4.module+el8.1.0+13242+45286865.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-4.module+el8.1.0+13242+45286865.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-11.module+el8.4.0+13212+81332387.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-11.module+el8.4.0+13212+81332387.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-11.module+el8.4.0+13212+81332387.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+717+27fd1ba7.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+703+19300c10"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.20-1ubuntu0.6+esm1"}]}],"versions":["1:2.1.20-1","1:2.1.20-1ubuntu0.1","1:2.1.20-1ubuntu0.3","1:2.1.20-1ubuntu0.4","1:2.1.20-1ubuntu0.5","1:2.1.20-1ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.26-1ubuntu0.4"}]}],"versions":["1:2.1.23-1","1:2.1.24-1","1:2.1.25-1","1:2.1.26-1","1:2.1.26-1ubuntu0.1","1:2.1.26-1ubuntu0.2","1:2.1.26-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1ubuntu3.1"}]}],"versions":["1:2.1.29-1","1:2.1.29-1build1","1:2.1.29-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.20-1ubuntu0.6+esm1"}]}],"versions":["1:2.1.20-1","1:2.1.20-1ubuntu0.1","1:2.1.20-1ubuntu0.3","1:2.1.20-1ubuntu0.4","1:2.1.20-1ubuntu0.5","1:2.1.20-1ubuntu0.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.26-1ubuntu0.4"}]}],"versions":["1:2.1.23-1","1:2.1.24-1","1:2.1.25-1","1:2.1.26-1","1:2.1.26-1ubuntu0.1","1:2.1.26-1ubuntu0.2","1:2.1.26-1ubuntu0.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1ubuntu3.1"}]}],"versions":["1:2.1.29-1","1:2.1.29-1build1","1:2.1.29-1ubuntu3"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.35-lp152.7.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.35-bp152.7.6.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"mailman"}],"references":[{"url":"https://mail.python.org/archives/list/mailman-announce%40python.org/thread/IKCO6JU755AP5G5TKMBJL6IEZQTTNPDQ/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugs.launchpad.net/mailman/+bug/1947640","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/10/21/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4991","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42097","tags":["advisory"]},{"url":"https://mail.python.org/archives/list/mailman-announce@python.org/thread/IKCO6JU755AP5G5TKMBJL6IEZQTTNPDQ/","tags":["report"]},{"url":"https://github.com/advisories/GHSA-vj65-f4hc-r425"},{"url":"https://errata.almalinux.org/8/ALSA-2021-4826.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-42096","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-42097","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42096","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4826","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020575","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4826.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42097","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4837","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4837.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4838","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4838.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4839","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4839.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4913","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026862","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4913.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44227","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44227","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4826","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-42097","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2021/10/21/4","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5121-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5121-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-42096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-12108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-12137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-15011","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DSDRER3UF4R57ILYOQY7J63PNAP2LA73/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047218","tags":["report"]},{"url":"https://bugzilla.suse.com/1191959","tags":["report"]},{"url":"https://bugzilla.suse.com/1191960","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42097","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJE7PQHJDJVNG4MP75G5GY65ABFE2RAP/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-42097","description":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).","status":"published","published":"2021-10-21T00:45:13Z","modified":"2024-08-04T03:22:25.926Z","updated_at":"2026-11-02T14:32:58.359368Z"}],"euvd":[{"id":"EUVD-2021-29083","description":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).","status":"published","published":"2021-10-21T00:45:13Z","modified":"2024-08-04T03:22:25Z","updated_at":"2026-11-03T03:24:16.217613Z"}],"ghsa":[{"id":"GHSA-vj65-f4hc-r425","title":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not...","description":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).","status":"published","published":"2022-05-24T19:18:30Z","modified":"2023-01-30T05:02:58Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:46:45.069338Z"}],"nvd":[{"id":"CVE-2021-42097","description":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).","status":"published","published":"2021-10-21T01:15:06.94Z","modified":"2026-06-17T04:09:18.743Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":8.5,"vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:07:00.137719Z"}],"osv":[{"id":"OESA-2021-1405","title":"mailman security update","description":"Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more.\r\n\r\nSecurity Fix(es):\r\n\r\n/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.(CVE-2020-12108)\r\n\r\nGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.(CVE-2020-12137)\r\n\r\nGNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.(CVE-2020-15011)\n\nGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.(CVE-2021-42096)\n\nGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).(CVE-2021-42097)","status":"published","published":"2021-10-30T11:04:40Z","modified":"2026-08-18T01:16:06.485064176Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4826","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:50:11Z","modified":"2026-09-08T10:01:41Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4837","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:50:24Z","modified":"2026-09-08T10:01:42Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4838","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:50:31Z","modified":"2026-09-08T10:01:43Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4839","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:50:18Z","modified":"2026-09-08T10:01:44Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4913","title":"Red Hat Security Advisory: mailman security update","status":"published","published":"2024-09-16T06:54:10Z","modified":"2026-09-08T10:01:44Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:4826","title":"Important: mailman:2.1 security update","description":"Mailman is a program used to help manage e-mail discussion lists.\n\nSecurity Fix(es):\n\n* mailman: CSRF token bypass allows to perform CSRF attacks and account takeover (CVE-2021-42097)\n\n* mailman: CSRF token derived from admin password allows offline brute-force attack (CVE-2021-42096)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-11-23T20:17:35Z","modified":"2026-02-05T14:30:04.646382Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-42097","description":"GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).","status":"published","published":"2021-10-21T00:00:00Z","modified":"2026-02-04T03:49:17.051792Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2021:4826","title":"Important: mailman:2.1 security update","description":"Mailman is a program used to help manage e-mail discussion lists.\n\nSecurity Fix(es):\n\n* mailman: CSRF token bypass allows to perform CSRF attacks and account takeover (CVE-2021-42097)\n\n* mailman: CSRF token derived from admin password allows offline brute-force attack (CVE-2021-42096)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-11-23T20:17:35Z","modified":"2026-10-29T11:01:11.33419015Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2791-1","title":"mailman - security update","status":"published","published":"2021-10-23T00:00:00Z","modified":"2026-03-09T01:20:02.021603Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4991-1","title":"mailman - security update","status":"published","published":"2021-10-22T00:00:00Z","modified":"2026-03-09T02:08:31.156474Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2021:1436-1","title":"Security update for mailman","description":"This update for mailman fixes the following issues:\n\nUpdate to 2.1.35 to fix 2 security issues: \n\n- A potential for for a list member to carry out an off-line brute force\n  attack to obtain the list admin password has been reported by Andre\n  Protas, Richard Cloke and Andy Nuttall of Apple.  This is fixed.\n  CVE-2021-42096  (boo#1191959, LP:#1947639)\n \n- A CSRF attack via the user options page could allow takeover of a users\n  account.  This is fixed.  CVE-2021-42097  (boo#1191960, LP:#1947640)\n- make package build reproducible (boo#1047218)\n","status":"published","published":"2021-11-02T09:25:21Z","modified":"2026-02-04T03:21:26.76018Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:1452-1","title":"Security update for mailman","description":"This update for mailman fixes the following issues:\n\nUpdate to 2.1.35 to fix 2 security issues: \n\n- A potential for for a list member to carry out an off-line brute force\n  attack to obtain the list admin password has been reported by Andre\n  Protas, Richard Cloke and Andy Nuttall of Apple.  This is fixed.\n  CVE-2021-42096  (boo#1191959, LP:#1947639)\n \n- A CSRF attack via the user options page could allow takeover of a users\n  account.  This is fixed.  CVE-2021-42097  (boo#1191960, LP:#1947640)\n- make package build reproducible (boo#1047218)\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-11-05T15:06:22Z","modified":"2026-02-04T03:23:37.128258Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"USN-5121-1","title":"mailman vulnerabilities","description":"Andre Protas, Richard Cloke, and Andy Nuttall discovered that Mailman\ndid not properly associate cross-site request forgery (CSRF) tokens\nto specific accounts. A remote attacker could use this to perform a\nCSRF attack to gain access to another account. (CVE-2021-42097)\n\nAndre Protas, Richard Cloke, and Andy Nuttall discovered that Mailman's\ncross-site request forgery (CSRF) tokens for the options page are\nderived from the admin password. A remote attacker could possibly use\nthis to assist in performing a brute force attack against the admin\npassword. (CVE-2021-42096)\n","status":"published","published":"2021-10-22T05:47:18Z","modified":"2026-06-25T13:30:49.550931495Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5121-2","title":"mailman vulnerabilities","description":"USN-5009-1 fixed vulnerabilities in Mailman. This update provides the\ncorresponding updates for Ubuntu 20.04 LTS. In addition, the following CVEs\nwere fixed:\n\nIt was discovered that Mailman allows arbitrary content injection. An attacker\ncould use this to inject malicious content. (CVE-2020-12108, CVE-2020-15011)\n\nIt was discovered that Mailman improperly sanitize the MIME content. An\nattacker could obtain sensitive information by sending a special type of\nattachment. (CVE-2020-12137)\n\nOriginal advisory details:\n\nAndre Protas, Richard Cloke, and Andy Nuttall discovered that Mailman\ndid not properly associate cross-site request forgery (CSRF) tokens\nto specific accounts. A remote attacker could use this to perform a\nCSRF attack to gain access to another account. (CVE-2021-42097)\n\nAndre Protas, Richard Cloke, and Andy Nuttall discovered that Mailman’s\ncross-site request forgery (CSRF) tokens for the options page are\nderived from the admin password. A remote attacker could possibly use\nthis to assist in performing a brute force attack against the admin\npassword. (CVE-2021-42096)\n","status":"published","published":"2021-11-01T11:49:48Z","modified":"2026-02-10T04:42:21Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}