https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T11:29:27.626814+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-6893 CVE-2016-6893 2026-10-02T11:29:27.660417+00:00

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.

 https://vulnerability.circl.lu/vuln/usn-3118-1 USN-3118-1 — mailman vulnerabilities 2026-10-02T11:29:27.660549+00:00

Affected: Ubuntu:14.04:LTS: mailman, Ubuntu:16.04:LTS: mailman

It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery (CSRF) attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could perform administrative actions. This issue only affected Ubuntu 12.04 LTS. (CVE-2016-7123)

Nishant Agarwala discovered that the Mailman user options page did not protect against cross-site request forgery (CSRF) attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could modify user options. (CVE-2016-6893)