Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-7123

Fixed in a distro release EPSS 2%

Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.

Published 2016-09-02 · CVE record · OSV

Products: gnu mailman

Distro releases

Release	Package	Fixed in
Ubuntu 14.04 LTS	mailman	1:2.1.16-2ubuntu0.2
Ubuntu 16.04 LTS	mailman	1:2.1.20-1ubuntu0.1