{"id":"CVE-2021-44227","aliases":["ALSA-2021:4916","DLA-3049-1","EUVD-2021-2613","GHSA-xq58-69h2-765m","OESA-2021-1456","OESA-2022-1931","PYSEC-2026-660","RHSA-2021:4913","RHSA-2021:4915","RHSA-2021:4916","RHSA-2021:5080","RHSA-2021:5081","RLSA-2021:4916","SUSE-SU-2022:1886-1","UBUNTU-CVE-2021-44227","USN-5180-1","USN-8067-1"],"status":"published","title":"Cross Site Request Forgery in mailman","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00757,"percentile":0.55685,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-352"],"published":"2021-12-02T02:52:31Z","modified":"2026-10-29T11:01:11Z","fixes":[{"ecosystem":"PyPI","package":"mailman","fixed_in":["2.1.38"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:8","package":"mailman","fixed_in":["3:2.1.29-12.module_el8.5.0+26+48d4c9ee.2","3:2.1.29-12.module_el8.5.0+2602+327eb9f3.2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"mailman","fixed_in":["2.1.36-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"mailman","fixed_in":["2.1.36-2.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman","fixed_in":["3:2.1.29-11.module+el8.4.0+13467+746daedf.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman-debuginfo","fixed_in":["3:2.1.29-11.module+el8.4.0+13467+746daedf.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman-debugsource","fixed_in":["3:2.1.29-11.module+el8.4.0+13467+746daedf.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman","fixed_in":["3:2.1.29-12.module+el8.5.0+13466+327eb9f3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman-debuginfo","fixed_in":["3:2.1.29-12.module+el8.5.0+13466+327eb9f3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman-debugsource","fixed_in":["3:2.1.29-12.module+el8.5.0+13466+327eb9f3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman","fixed_in":["3:2.1.29-6.module+el8.2.0+13543+86b2c701"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman-debuginfo","fixed_in":["3:2.1.29-6.module+el8.2.0+13543+86b2c701"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman-debugsource","fixed_in":["3:2.1.29-6.module+el8.2.0+13543+86b2c701"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"mailman","fixed_in":["3:2.1.29-5.module+el8.1.0+13542+e9b93c88"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"mailman-debuginfo","fixed_in":["3:2.1.29-5.module+el8.1.0+13542+e9b93c88"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"mailman-debugsource","fixed_in":["3:2.1.29-5.module+el8.1.0+13542+e9b93c88"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"mailman","fixed_in":["3:2.1.29-12.module+el8.5.0+717+27fd1ba7.2","3:2.1.29-12.module+el8.5.0+703+19300c10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","fixed_in":["1:2.1.20-1ubuntu0.6+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mailman","fixed_in":["1:2.1.26-1ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mailman","fixed_in":["1:2.1.29-1ubuntu3.1+esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.38"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module_el8.5.0+26+48d4c9ee.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module_el8.5.0+2602+327eb9f3.2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.23-1+deb9u8"}]}],"versions":["1:2.1.23-1","1:2.1.23-1+deb9u1","1:2.1.23-1+deb9u2","1:2.1.23-1+deb9u3","1:2.1.23-1+deb9u4","1:2.1.23-1+deb9u5","1:2.1.23-1+deb9u6","1:2.1.23-1+deb9u7"],"bundled":3},{"source":"osv","ecosystem":"PyPI","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.38"}]}],"versions":["3.0.0b3-"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.36-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.36-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.36-2.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"PyPI","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.38"}]}],"versions":["3.0.0b3-"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.15-30.el7_9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-11.module+el8.4.0+13467+746daedf.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-11.module+el8.4.0+13467+746daedf.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-11.module+el8.4.0+13467+746daedf.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+13466+327eb9f3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+13466+327eb9f3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+13466+327eb9f3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-6.module+el8.2.0+13543+86b2c701"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-6.module+el8.2.0+13543+86b2c701"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-6.module+el8.2.0+13543+86b2c701"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-5.module+el8.1.0+13542+e9b93c88"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"mailman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-5.module+el8.1.0+13542+e9b93c88"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"mailman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-5.module+el8.1.0+13542+e9b93c88"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+717+27fd1ba7.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.29-12.module+el8.5.0+703+19300c10"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.17-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.20-1ubuntu0.6+esm3"}]}],"versions":["1:2.1.20-1","1:2.1.20-1ubuntu0.1","1:2.1.20-1ubuntu0.3","1:2.1.20-1ubuntu0.4","1:2.1.20-1ubuntu0.5","1:2.1.20-1ubuntu0.6","1:2.1.20-1ubuntu0.6+esm1","1:2.1.20-1ubuntu0.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.26-1ubuntu0.6"}]}],"versions":["1:2.1.23-1","1:2.1.24-1","1:2.1.25-1","1:2.1.26-1","1:2.1.26-1ubuntu0.1","1:2.1.26-1ubuntu0.2","1:2.1.26-1ubuntu0.3","1:2.1.26-1ubuntu0.4","1:2.1.26-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1ubuntu3.1+esm2"}]}],"versions":["1:2.1.29-1","1:2.1.29-1build1","1:2.1.29-1ubuntu3","1:2.1.29-1ubuntu3.1","1:2.1.29-1ubuntu3.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.26-1ubuntu0.6"}]}],"versions":["1:2.1.23-1","1:2.1.24-1","1:2.1.25-1","1:2.1.26-1","1:2.1.26-1ubuntu0.1","1:2.1.26-1ubuntu0.2","1:2.1.26-1ubuntu0.3","1:2.1.26-1ubuntu0.4","1:2.1.26-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.20-1ubuntu0.6+esm3"}]}],"versions":["1:2.1.20-1","1:2.1.20-1ubuntu0.1","1:2.1.20-1ubuntu0.3","1:2.1.20-1ubuntu0.4","1:2.1.20-1ubuntu0.5","1:2.1.20-1ubuntu0.6","1:2.1.20-1ubuntu0.6+esm1","1:2.1.20-1ubuntu0.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mailman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.29-1ubuntu3.1+esm2"}]}],"versions":["1:2.1.29-1","1:2.1.29-1build1","1:2.1.29-1ubuntu3","1:2.1.29-1ubuntu3.1","1:2.1.29-1ubuntu3.1+esm1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"mailman"}],"references":[{"url":"https://bugs.launchpad.net/mailman/+bug/1952384","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mailing List","Patch","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44227","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xq58-69h2-765m","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4916.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-44227","tags":["report"]},{"url":"https://gitlab.com/mailman/mailman","tags":["package"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1456","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43332","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43331","tags":["advisory"]},{"url":"https://pypi.org/project/mailman","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4913","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026862","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4913.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44227","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44227","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4915","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4915.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4916","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4916.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5080","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5080.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5081","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5081.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4916","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221886-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191959","tags":["report"]},{"url":"https://bugzilla.suse.com/1192735","tags":["report"]},{"url":"https://bugzilla.suse.com/1192741","tags":["report"]},{"url":"https://bugzilla.suse.com/1193316","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44227","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-44227","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5180-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8067-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-44227","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2021-12-02T02:52:31Z","modified":"2024-08-04T04:17:24.848Z","updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-2613","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2021-12-02T02:52:31Z","modified":"2024-08-04T04:17:24Z","updated_at":"2026-11-03T03:24:12.005069Z"}],"ghsa":[{"id":"GHSA-xq58-69h2-765m","title":"Cross Site Request Forgery in mailman","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2021-12-16T15:27:06Z","modified":"2023-01-27T05:00:35Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:36:14.825433Z"}],"nvd":[{"id":"CVE-2021-44227","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2021-12-02T03:15:06.797Z","modified":"2026-06-17T04:12:05.343Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:07:01.811115Z"}],"osv":[{"id":"GHSA-xq58-69h2-765m","title":"Cross Site Request Forgery in mailman","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2021-12-16T15:27:06Z","modified":"2026-07-06T08:11:27.977782181Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"OESA-2021-1456","title":"mailman security update","description":"The GNU mailing list manager.\r\n\r\nSecurity Fix(es):\r\n\r\nIn GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.(CVE-2021-44227)","status":"published","published":"2021-12-10T11:04:43Z","modified":"2026-08-18T01:16:14.068489683Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2022-1931","title":"mailman security update","description":"Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more.\r\n\r\nSecurity Fix(es):\r\n\r\nIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.(CVE-2021-43332)\r\n\r\nIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.(CVE-2021-43331)\r\n\r\nIn GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.(CVE-2021-44227)","status":"published","published":"2022-09-23T11:05:14Z","modified":"2026-08-18T01:17:16.857286315Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"PYSEC-2026-660","title":"Cross Site Request Forgery in mailman","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2026-07-02T14:13:14.288696Z","modified":"2026-07-06T08:00:43.410272699Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:57.671918Z"},{"id":"RHSA-2021:4913","title":"Red Hat Security Advisory: mailman security update","status":"published","published":"2024-09-16T06:54:10Z","modified":"2026-09-08T10:01:44Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4915","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:54:17Z","modified":"2026-09-08T10:01:45Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4916","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:54:24Z","modified":"2026-09-08T10:01:46Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:5080","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:54:31Z","modified":"2026-09-08T10:01:46Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:5081","title":"Red Hat Security Advisory: mailman:2.1 security update","status":"published","published":"2024-09-16T06:54:40Z","modified":"2026-09-08T10:01:47Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:4916","title":"Important: mailman:2.1 security update","description":"Mailman is a program used to help manage e-mail discussion lists.\n\nSecurity Fix(es):\n\n* mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover (CVE-2021-44227)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-12-02T15:57:01Z","modified":"2026-02-04T15:15:07.506754Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-44227","description":"In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.","status":"published","published":"2021-12-02T03:15:00Z","modified":"2026-03-03T06:14:01.486954Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2021:4916","title":"Important: mailman:2.1 security update","description":"Mailman is a program used to help manage e-mail discussion lists.\n\nSecurity Fix(es):\n\n* mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover (CVE-2021-44227)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-12-02T15:57:01Z","modified":"2026-10-29T11:01:11.687489244Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-3049-1","title":"mailman - security update","status":"published","published":"2022-06-09T00:00:00Z","modified":"2026-03-09T01:19:54.357273Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"SUSE-SU-2022:1886-1","title":"Security update for mailman","description":"This update for mailman fixes the following issues:\n\n- CVE-2021-44227: Preventing list moderator or list member accessing the admin UI (bsc#1193316).\n- CVE-2021-43332: Preventing list moderator from cracking the list admin password encrypted in a CSRF token (bsc#1192741).\n- CVE-2021-43331: Fixed XSS in Cgi/options.py (bsc#1192735).\n- CVE-2021-42096: Add protection against remote privilege escalation via csrf_token derived from admin password (bsc#1191959).\n","status":"published","published":"2022-05-31T07:10:14Z","modified":"2026-02-04T02:53:53.585079Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5180-1","title":"mailman vulnerability","description":"It was discovered that Mailman incorrectly handled CSRF tokens. A remote\nlist member or moderator could possibly use their own token to craft an\nadmin request CSRF attack and set a new admin password or make other\nchanges.\n","status":"published","published":"2021-12-07T17:55:04Z","modified":"2026-02-10T04:42:24Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-8067-1","title":"mailman vulnerability","description":"It was discovered that Mailman incorrectly handled CSRF tokens. A remote\nlist member or moderator could possibly use their own token to craft an\nadmin request CSRF attack and set a new admin password or make other\nchanges.","status":"published","published":"2026-03-02T17:29:15Z","modified":"2026-06-25T13:32:31.739145569Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}