Login Request a demo
MA
Product
Mailman
by Gnu · last CVE Apr 20, 2025
47
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities47In the news0Timeline
Severity mix
Critical 0High 6Medium 11Low 0
Severity
All severities47Critical0High6Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mailman to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-44227
8.8
1%
Dec 2
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes
Affected: before 2.1.38
CVE-2016-7123
8.8
2%
Sep 2
Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators
Affected: through 2.1.14
CVE-2016-6893
8.8
2%
Sep 2
Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users…
Affected: 2.1; 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; +34 more
CVE-2025-43920
8.1
1%
Apr 20
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell…
Affected: 2.1.1 through 2.1.39
CVE-2021-42097
8.0
1%
Oct 21
GNU Mailman before 2.1.35 may allow remote Privilege Escalation
Affected: before 2.1.35
CVE-2025-43919
7.5
1%
Apr 20
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the…
Affected: 2.1.1 through 2.1.39
Showing 6