CVE-2021-44227: Debian Linux
High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
Affected products
Published 2021-12-02. Last modified 2026-06-17.