299,584
Total vulnerabilities in the database
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
| Software | From | Fixed in |
|---|---|---|
| gnu / mailman | - | 2.1.38 |
| debian / debian_linux | 9.0 | 9.0.x |
mailman
|
- | 2.1.38 |