Security Advisory

CVE-2021-44227

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-02 02:52:31
Last updated 2024-08-04 04:17:24
Assigner mitre
State PUBLISHED

Description

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.