Security Advisory

CVE-2025-43921

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-20 00:00:00

Last updated 2025-04-28 13:45:41

Assigner mitre

State PUBLISHED

Description

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.

← Browse all CVEs View on cve.org ↗