VDB
GCVE-110-MAGEIA-2016-343
GCVE-110-MAGEIA-2016-343
Advisory Published
Cross-site request forgery (CSRF) vulnerability in the user options page in
GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the
authentication of arbitrary users for requests that modify an option, as
demonstrated by gaining access to the credentials of a victim's account
(CVE-2016-6893).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | mailman | 0 (affected), 2.1.20-3.mga5 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.