High severity8.8NVD Advisory· Published Dec 2, 2021· Updated Jun 17, 2026
CVE-2021-44227
CVE-2021-44227
Description
In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
mailmanPyPI | < 2.1.38 | 2.1.38 |
Affected products
18- GNU/Mailmandescription
- ghsa-coords15 versionspkg:pypi/mailmanpkg:rpm/almalinux/mailmanpkg:rpm/suse/mailman&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/mailman&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/mailman&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/mailman&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/mailman&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/mailman&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 2.1.38+ 14 more
- (no CPE)range: < 2.1.38
- (no CPE)range: < 3:2.1.29-12.module_el8.5.0+26+48d4c9ee.2
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
- (no CPE)range: < 2.1.17-3.26.1
Patches
Vulnerability mechanics
References
4- bugs.launchpad.net/mailman/+bug/1952384nvdIssue TrackingMailing ListPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-xq58-69h2-765mghsaADVISORY
- lists.debian.org/debian-lts-announce/2022/06/msg00011.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-44227ghsaADVISORY
News mentions
0No linked articles in our index yet.