CVE-2016-7123

High

Published: 02/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before version 2.1.15 allows remote attackers to hijack the authentication of administrators.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to administrator accounts, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade GNU Mailman to version 2.1.15 or later to mitigate this vulnerability.

Other vulnerabilities in GNU Mailman

CVE-2015-2775High
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.