← Database

CVE-2021-43332

MEDIUM CVSS: 6.5 Published: 2021-11-12 Modified: 2026-06-17

Description

In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack.

Affected Platforms

Debian Debian LinuxGnu Mailman

Weakness Type

CWE-522

References