Description
Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.
Remediation
References
Related Vulnerabilities
WordPress Plugin VDZ Google Analytics or Google Tag Manager/GTM Cross-Site Scripting (1.5.5)
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2102)
Nginx buffer underflow vulnerability
WordPress Plugin Count per Day Information Disclosure (3.2.5)
WordPress Plugin BuddyPress Edit Activity Cross-Site Scripting (1.0.5)