CVE-2025-43920

概要

参考情報

• code.launchpad.net/~mailman-coders/mailman/2.1 · Product
• 0NYX-MY7H/CVE-2025-43920 · Exploit
• cpanel/mailman2-python3
• openwall.com/lists/oss-security/2025/04/21/6

mailman のその他の脆弱性

• CVE-2025-43921中 5.3GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE:…
• CVE-2025-43919高 7.5GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at …
• CVE-2021-34337中 6.3An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the valu…
• CVE-2021-44227高 8.8In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new adm…
• CVE-2021-43332中 6.5In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. T…