GNU Mailman before 2.1.35 may allow remote Privilege Escalation
published October 21, 2021
CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01250 · 69.2th percentile
Published
2021-10-21T00:40Z
EPSS history
Timeline
21 OCT 00:40Z
GNU Mailman before 2.1.35 may allow remote Privilege Escalation