Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-44227

EPSS 0.29% · P52
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-44227

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GNU Mailman 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNU Mailman是GNU社区的一套免费的用于管理电子邮件讨论和电子邮件列表的软件。该软件可与Web项目集成，使用户方便管理邮件订阅帐号，并提供内置归档、自动转发处理、内容过滤和反垃圾过滤器等功能。 GNU Mailman 2.1.38之前版本存在安全漏洞，该漏洞源于列表成员或版主可以获得CSRF令牌并创建一个管理请求(使用该令牌)来设置新的管理密码或进行其他更改。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-44227

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-44227

请登录查看更多情报信息。

Same Patch Batch · n/a · 2021-12-02 · 24 CVEs total

CVE-2021-43682Thinkphp-Bjyblog 跨站脚本漏洞
CVE-2020-36135Aom 代码问题漏洞
CVE-2020-36134Aom 缓冲区错误漏洞
CVE-2020-36133AOM 安全漏洞
CVE-2020-36131Aom 缓冲区错误漏洞
CVE-2020-36130Aom 代码问题漏洞
CVE-2020-36129Aom 缓冲区错误漏洞
CVE-2020-27414Maharashtra State Electricity Distribution Maharashtra State Electricity Board Android App
CVE-2021-26777Circutor Compact Dc-S Basic Smart Metering Concentrator 缓冲区错误漏洞
CVE-2021-43686Nzedb 跨站脚本漏洞
CVE-2021-43683Haschek Solutions Pictshare 跨站脚本漏洞
CVE-2021-43681SakuraPanel 跨站脚本漏洞
CVE-2021-25785Taocms 跨站脚本漏洞
CVE-2021-43679ECShop SQL注入漏洞
CVE-2021-44518eGeeTouch 3rd Generation Travel Padlock application 安全漏洞
CVE-2021-44050Broadcom CA Network Flow Analysis SQL注入漏洞
CVE-2021-43327Renesas Electronics Renesas RX65和RX65N 安全漏洞
CVE-2021-28236Libredwg 代码问题漏洞
CVE-2021-28237Libredwg 缓冲区错误漏洞
CVE-2020-29176Z-BlogPHP 代码问题漏洞

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2021-44227

No comments yet

Leave a comment