Description

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).

Remediation

References

CVE-2021-42097

Related Vulnerabilities

MySQL CVE-2019-2784 Vulnerability (CVE-2019-2784)

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2213)

Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.9.8)

Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-34553)

Severity

High

Classification

CVE-2021-42097 CWE-352 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities