CVE-2021-44227
published 2021-12-02CVE-2021-44227: In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make…
PriorityP338high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.73%
49.9th percentile
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| gnu | mailman | < 2.1.38 | 2.1.38 |
| gnu | mailman | >= 0 < 2.1.38 | 2.1.38 |
| gnu | mailman | >= 0 < 1:2.1.26-1ubuntu0.6 | 1:2.1.26-1ubuntu0.6 |
| gnu | mailman | >= 0 < 1:2.1.20-1ubuntu0.6+esm3 | 1:2.1.20-1ubuntu0.6+esm3 |
| gnu | mailman | >= 0 < 1:2.1.29-1ubuntu3.1+esm2 | 1:2.1.29-1ubuntu3.1+esm2 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Cross Site Request Forgery in mailman
ghsa·2021-12-16
CVE-2021-44227 [HIGH] CWE-352 Cross Site Request Forgery in mailman
Cross Site Request Forgery in mailman
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
OSV
Cross Site Request Forgery in mailman
osv·2021-12-16
CVE-2021-44227 [HIGH] Cross Site Request Forgery in mailman
Cross Site Request Forgery in mailman
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
OSV
CVE-2021-44227: In GNU Mailman before 2
osv·2021-12-02·CVSS 8.8
CVE-2021-44227 [HIGH] CVE-2021-44227: In GNU Mailman before 2
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Ubuntu
Mailman vulnerability
vendor_ubuntu·2026-03-02
CVE-2021-44227 Mailman vulnerability
Title: Mailman vulnerability
Summary: A system hardening measure could be bypassed.
It was discovered that Mailman incorrectly handled CSRF tokens. A remote
list member or moderator could possibly use their own token to craft an
admin request CSRF attack and set a new admin password or make other
changes.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover
vendor_redhat·2021-11-26·CVSS 8.8
CVE-2021-44227 [HIGH] CWE-352 mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover
mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
A Cross-Site Request Forgery (CSRF) attack can be performed in mailman due to a CSRF token bypass. CSRF tokens are not checked against the right type of user when performing admin operations and a token created by a regular user can be used by an admin to perform an admin-level request, effectively bypassing the protection provided by CSRF tokens. A remote attacker with an account on the mailman system can use this flaw to perform a CSRF attack and perform operations on behalf of the victim admin.
Mitigation: Red Hat has investigated wheth
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-12-02
Published