https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T20:14:19.173594+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-7123 CVE-2016-7123 2026-10-05T20:14:19.175657+00:00

Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.

 https://vulnerability.circl.lu/vuln/usn-3118-1 USN-3118-1 — mailman vulnerabilities 2026-10-05T20:14:19.175737+00:00

Affected: Ubuntu:14.04:LTS: mailman, Ubuntu:16.04:LTS: mailman

It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery (CSRF) attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could perform administrative actions. This issue only affected Ubuntu 12.04 LTS. (CVE-2016-7123)

Nishant Agarwala discovered that the Mailman user options page did not protect against cross-site request forgery (CSRF) attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could modify user options. (CVE-2016-6893)