CVE-2021-40347: Open Redirect Vulnerability in GNU Mailman Postorius
Summary
CVE-2021-40347: An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. Affects postorius versions < 1.3.5. Fixed in 1.3.5. How to fix ↓
Also tracked for
- postorius · Debian:11
The same CVE-2021-40347 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
GNU Mailman Postorius is a web user interface for the GNU Mailman mailing list manager. It provides a convenient way for users to manage their mailing lists, including subscribing and unsubscribing from lists. The vulnerability identified as CVE-2021-40347 allows an attacker who is logged into any account to send a crafted POST request, which can unsubscribe any user from a mailing list. Additionally, this vulnerability exposes whether the targeted email address was subscribed to the list in the first place.
Vulnerability Detail
The vulnerability arises from a flaw in the 'views/list.py' module of GNU Mailman Postorius before version 1.3.5. By exploiting this flaw, an authenticated attacker can abuse the unsubscribe functionality to remove any user from a mailing list without proper authorization. Furthermore, the attacker can determine the subscription status of an email address by observing the response to the crafted request. This vulnerability poses a risk to the privacy and integrity of mailing lists, as an attacker can manipulate subscriptions and gather information about users.
How To Fix
Minimum fixed version
1.3.5
This is the first release that contains the fix.
pip install --upgrade "postorius==1.3.5"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official fix by upgrading to GNU Mailman Postorius version 1.3.5 or later.
Conclusion
The Open Redirect vulnerability in GNU Mailman Postorius before version 1.3.5 allows an attacker to unsubscribe any user from a mailing list and determine the subscription status of an email address. To mitigate this vulnerability, it is crucial to upgrade to GNU Mailman Postorius version 1.3.5 or later. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for postorius →
FAQ
GNU Mailman Postorius is a web user interface for the GNU Mailman mailing list manager. It provides a convenient way for users to manage their mailing lists, including subscribing and unsubscribing from lists.
This vulnerability allows an attacker to unsubscribe any user from a mailing list without proper authorization. It also reveals whether a specific email address is subscribed to the list.
Users of GNU Mailman Postorius versions prior to 1.3.5 are affected by this vulnerability.
No, there is no known workaround for this vulnerability. It is crucial to apply the official fix by upgrading to GNU Mailman Postorius version 1.3.5 or later.
To fix this vulnerability, you should upgrade GNU Mailman Postorius to version 1.3.5 or later. This version includes the necessary patches to address the issue and prevent unauthorized unsubscribes.
References
Related vulnerabilities
Recent vulnerabilities recorded for postorius.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
