VDB
CVE-2021-40347
CVE-2021-40347
PUBLISHED
CVSS 5.400000095367432 MEDIUM
GNU Mailman Postorius Access Control Issues
EPSS 1.19% · 67.8th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score
1.19%
67.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | postorius | 0 |
| postorius_project | postorius | 0 |
| n/a | n/a | * |
Timeline
- Sep 10, 2021 CVE Published
- Sep 11, 2021 EPSS Score
- Nov 8, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 3, 2022 EPSS Score
- Jun 30, 2022 EPSS Score
- Aug 29, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 20, 2023 EPSS Score
References
- https://phabricator.wikimedia.org/T289798 url
- https://gitlab.com/mailman/postorius/-/issues/531 url
- DSA-4970 advisory
- https://gitlab.com/mailman/postorius/-/commit/3d880c56b58bc26b32eac0799407d74b64b7474b url
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993746 advisory
- https://gitlab.com/mailman/postorius/-/tags url
- https://nvd.nist.gov/vuln/detail/CVE-2021-40347 advisory
- https://github.com/pypa/advisory-database/tree/main/vulns/postorius/PYSEC-2021-319.yaml url
- https://gitlab.com/mailman/postorius package