High severity8.8NVD Advisory· Published Sep 2, 2016· Updated Jun 17, 2026
CVE-2016-6893
CVE-2016-6893
Description
Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
66cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*+ 46 more
- cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.10b1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.10b3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.10b4:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.10:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.11:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.11:rc2:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.12:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.12:rc2:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.13:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.14-1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.14:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.15:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.16:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.16:rc2:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.16:rc3:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.18-1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.18:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.18:rc2:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.18:rc3:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.19:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.19:rc1:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.19:rc2:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.19:rc3:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.20:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.21:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.21:rc2:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.22:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.23:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:mailman:2.1.9:*:*:*:*:*:*:*
- (no CPE)range: <2.1.23
- osv-coords19 versionspkg:rpm/opensuse/mailman&distro=openSUSE%20Tumbleweedpkg:rpm/suse/mailman&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/mailman&distro=SUSE%20OpenStack%20Cloud%207
< 2.1.23-1.2+ 18 more
- (no CPE)range: < 2.1.23-1.2
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.15-9.6.6.1
- (no CPE)range: < 2.1.15-9.6.3.1
- (no CPE)range: < 2.1.15-9.6.12.1
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.15-9.6.3.1
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
- (no CPE)range: < 2.1.17-3.3.3
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.