Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-6893

Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
Products affected by CVE-2016-6893
  • Gnu » Mailman » Version: 2.1
    cpe:2.3:a:gnu:mailman:2.1
  • Gnu » Mailman » Version: 2.1.1
    cpe:2.3:a:gnu:mailman:2.1.1
  • Gnu » Mailman » Version: 2.1.10
    cpe:2.3:a:gnu:mailman:2.1.10
  • Gnu » Mailman » Version: 2.1.10b1
    cpe:2.3:a:gnu:mailman:2.1.10b1
  • Gnu » Mailman » Version: 2.1.10b3
    cpe:2.3:a:gnu:mailman:2.1.10b3
  • Gnu » Mailman » Version: 2.1.10b4
    cpe:2.3:a:gnu:mailman:2.1.10b4
  • Gnu » Mailman » Version: 2.1.11
    cpe:2.3:a:gnu:mailman:2.1.11
  • Gnu » Mailman » Version: 2.1.12
    cpe:2.3:a:gnu:mailman:2.1.12
  • Gnu » Mailman » Version: 2.1.13
    cpe:2.3:a:gnu:mailman:2.1.13
  • Gnu » Mailman » Version: 2.1.14
    cpe:2.3:a:gnu:mailman:2.1.14
  • Gnu » Mailman » Version: 2.1.14-1
    cpe:2.3:a:gnu:mailman:2.1.14-1
  • Gnu » Mailman » Version: 2.1.15
    cpe:2.3:a:gnu:mailman:2.1.15
  • Gnu » Mailman » Version: 2.1.16
    cpe:2.3:a:gnu:mailman:2.1.16
  • Gnu » Mailman » Version: 2.1.17
    cpe:2.3:a:gnu:mailman:2.1.17
  • Gnu » Mailman » Version: 2.1.18
    cpe:2.3:a:gnu:mailman:2.1.18
  • Gnu » Mailman » Version: 2.1.18-1
    cpe:2.3:a:gnu:mailman:2.1.18-1
  • Gnu » Mailman » Version: 2.1.19
    cpe:2.3:a:gnu:mailman:2.1.19
  • Gnu » Mailman » Version: 2.1.2
    cpe:2.3:a:gnu:mailman:2.1.2
  • Gnu » Mailman » Version: 2.1.20
    cpe:2.3:a:gnu:mailman:2.1.20
  • Gnu » Mailman » Version: 2.1.21
    cpe:2.3:a:gnu:mailman:2.1.21
  • Gnu » Mailman » Version: 2.1.22
    cpe:2.3:a:gnu:mailman:2.1.22
  • Gnu » Mailman » Version: 2.1.23
    cpe:2.3:a:gnu:mailman:2.1.23
  • Gnu » Mailman » Version: 2.1.3
    cpe:2.3:a:gnu:mailman:2.1.3
  • Gnu » Mailman » Version: 2.1.4
    cpe:2.3:a:gnu:mailman:2.1.4
  • Gnu » Mailman » Version: 2.1.5
    cpe:2.3:a:gnu:mailman:2.1.5
  • Gnu » Mailman » Version: 2.1.6
    cpe:2.3:a:gnu:mailman:2.1.6
  • Gnu » Mailman » Version: 2.1.8
    cpe:2.3:a:gnu:mailman:2.1.8
  • Gnu » Mailman » Version: 2.1.9
    cpe:2.3:a:gnu:mailman:2.1.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved