CVE-2021-42096: Debian Linux
Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.
Affected products
Published 2021-10-21. Last modified 2026-06-17.