CVE-2021-42096

Several vulnerabilities were discovered in mailman, a web-based mailing list manager, which could result in arbitrary content injection via the options and private archive login pages, and CSRF attacks or privilege escalation via the user options page For the oldstable distribution (buster), these problems have been fixed in version 1:2129-1+deb ...

Sensitive information is exposed to unprivileged users in mailman The hash of the list admin password is used to derive the CSRF (Cross-site Request Forgery) token, which is exposed to unprivileged members of a list Malicious members may use the CSRF token to perform an offline brute-force attack to retrieve the list admin password ...

GNU Mailman before 2135 may allow remote privilege escalation A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password ...