{"id":"CVE-2021-43332","aliases":["DLA-3049-1","EUVD-2021-30270","GHSA-w7fq-695f-9q8v","OESA-2021-1444","OESA-2022-1931","SUSE-SU-2022:1886-1","UBUNTU-CVE-2021-43332","USN-5151-1","USN-5151-2"],"status":"published","title":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an...","description":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01153,"percentile":0.67198,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-307","CWE-522"],"published":"2021-11-12T20:45:35Z","modified":"2026-08-18T01:17:16Z","fixes":[{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","fixed_in":["1:2.1.20-1ubuntu0.6+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mailman","fixed_in":["1:2.1.26-1ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mailman","fixed_in":["1:2.1.29-1ubuntu3.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.23-1+deb9u8"}]}],"versions":["1:2.1.23-1","1:2.1.23-1+deb9u1","1:2.1.23-1+deb9u2","1:2.1.23-1+deb9u3","1:2.1.23-1+deb9u4","1:2.1.23-1+deb9u5","1:2.1.23-1+deb9u6","1:2.1.23-1+deb9u7"],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.36-1.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.36-1.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.36-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.20-1ubuntu0.6+esm2"}]}],"versions":["1:2.1.20-1","1:2.1.20-1ubuntu0.1","1:2.1.20-1ubuntu0.3","1:2.1.20-1ubuntu0.4","1:2.1.20-1ubuntu0.5","1:2.1.20-1ubuntu0.6","1:2.1.20-1ubuntu0.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.26-1ubuntu0.5"}]}],"versions":["1:2.1.23-1","1:2.1.24-1","1:2.1.25-1","1:2.1.26-1","1:2.1.26-1ubuntu0.1","1:2.1.26-1ubuntu0.2","1:2.1.26-1ubuntu0.3","1:2.1.26-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1ubuntu3.1+esm1"}]}],"versions":["1:2.1.29-1","1:2.1.29-1build1","1:2.1.29-1ubuntu3","1:2.1.29-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.20-1ubuntu0.6+esm2"}]}],"versions":["1:2.1.20-1","1:2.1.20-1ubuntu0.1","1:2.1.20-1ubuntu0.3","1:2.1.20-1ubuntu0.4","1:2.1.20-1ubuntu0.5","1:2.1.20-1ubuntu0.6","1:2.1.20-1ubuntu0.6+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.26-1ubuntu0.5"}]}],"versions":["1:2.1.23-1","1:2.1.24-1","1:2.1.25-1","1:2.1.26-1","1:2.1.26-1ubuntu0.1","1:2.1.26-1ubuntu0.2","1:2.1.26-1ubuntu0.3","1:2.1.26-1ubuntu0.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1ubuntu3.1+esm1"}]}],"versions":["1:2.1.29-1","1:2.1.29-1build1","1:2.1.29-1ubuntu3","1:2.1.29-1ubuntu3.1"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"mailman"}],"references":[{"url":"https://bugs.launchpad.net/mailman/+bug/1949403","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://mail.python.org/archives/list/mailman-announce%40python.org/message/I2X7PSFXIEPLM3UMKZMGOEO3UFYETGRL/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43332","tags":["advisory"]},{"url":"https://mail.python.org/archives/list/mailman-announce@python.org/message/I2X7PSFXIEPLM3UMKZMGOEO3UFYETGRL/","tags":["report"]},{"url":"https://github.com/advisories/GHSA-w7fq-695f-9q8v"},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43331","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44227","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221886-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191959","tags":["report"]},{"url":"https://bugzilla.suse.com/1192735","tags":["report"]},{"url":"https://bugzilla.suse.com/1192741","tags":["report"]},{"url":"https://bugzilla.suse.com/1193316","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44227","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-43332","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5151-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5151-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-43331","tags":["report"]},{"url":"https://launchpad.net/bugs/1949401","tags":["report"]},{"url":"https://launchpad.net/mailman/+bug/1949403","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-43332","description":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.","status":"published","published":"2021-11-12T20:45:35Z","modified":"2024-08-04T03:55:28.492Z","updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2021-30270","description":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.","status":"published","published":"2021-11-12T20:45:35Z","modified":"2024-08-04T03:55:28Z","updated_at":"2026-11-03T03:24:14.245608Z"}],"ghsa":[{"id":"GHSA-w7fq-695f-9q8v","title":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an...","description":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.","status":"published","published":"2022-05-24T19:20:30Z","modified":"2023-02-02T05:02:54Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-307","CWE-522"],"updated_at":"2026-11-02T14:51:31.853894Z"}],"nvd":[{"id":"CVE-2021-43332","description":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.","status":"published","published":"2021-11-12T21:15:07.95Z","modified":"2026-06-17T04:10:51.82Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:07:00.984108Z"}],"osv":[{"id":"OESA-2021-1444","title":"mailman security update","description":"Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.(CVE-2021-43332)\r\n\r\nIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.(CVE-2021-43331)","status":"published","published":"2021-11-26T11:04:43Z","modified":"2026-08-18T01:16:09.141417037Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2022-1931","title":"mailman security update","description":"Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.(CVE-2021-43332)\r\n\r\nIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.(CVE-2021-43331)\r\n\r\nIn GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.(CVE-2021-44227)","status":"published","published":"2022-09-23T11:05:14Z","modified":"2026-08-18T01:17:16.857286315Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2021-43332","description":"In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.","status":"published","published":"2021-11-12T21:15:00Z","modified":"2026-02-04T02:25:22.22492Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DLA-3049-1","title":"mailman - security update","status":"published","published":"2022-06-09T00:00:00Z","modified":"2026-03-09T01:19:54.357273Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"SUSE-SU-2022:1886-1","title":"Security update for mailman","description":"This update for mailman fixes the following issues:\n\n- CVE-2021-44227: Preventing list moderator or list member accessing the admin UI (bsc#1193316).\n- CVE-2021-43332: Preventing list moderator from cracking the list admin password encrypted in a CSRF token (bsc#1192741).\n- CVE-2021-43331: Fixed XSS in Cgi/options.py (bsc#1192735).\n- CVE-2021-42096: Add protection against remote privilege escalation via csrf_token derived from admin password (bsc#1191959).\n","status":"published","published":"2022-05-31T07:10:14Z","modified":"2026-02-04T02:53:53.585079Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5151-1","title":"mailman vulnerabilities","description":"It was discovered that Mailman incorrectly handled certain URL.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2021-43331)\n\nIt was discovered that Mailman incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive information.\n(CVE-2021-43332)\n","status":"published","published":"2021-11-18T13:55:40Z","modified":"2026-06-25T13:30:51.068078182Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5151-2","title":"mailman vulnerabilities","description":"USN-5151-1 fixed several vulnerabilities in Mailman. This update provides\nthe corresponding update for Ubuntu 20.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Mailman incorrectly handled certain URL.\n An attacker could possibly use this issue to execute arbitrary code.\n (CVE-2021-43331)\n\n It was discovered that Mailman incorrectly handled certain inputs.\n An attacker could possibly use this issue to expose sensitive information.\n (CVE-2021-43332)\n","status":"published","published":"2021-11-25T12:32:04Z","modified":"2026-02-10T04:42:23Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}