CVE-2021-40347

An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993746Mailing List, Third Party Advisory
• https://gitlab.com/mailman/postorius/-/commit/3d880c56b58bc26b32eac0799407d74b64b7474bPatch, Third Party Advisory
• https://gitlab.com/mailman/postorius/-/issues/531Exploit, Issue Tracking, Patch, Third Party Advisory
• https://gitlab.com/mailman/postorius/-/tagsThird Party Advisory
• https://phabricator.wikimedia.org/T289798Exploit, Patch, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4970Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993746Mailing List, Third Party Advisory
• https://gitlab.com/mailman/postorius/-/commit/3d880c56b58bc26b32eac0799407d74b64b7474bPatch, Third Party Advisory
• https://gitlab.com/mailman/postorius/-/issues/531Exploit, Issue Tracking, Patch, Third Party Advisory
• https://gitlab.com/mailman/postorius/-/tagsThird Party Advisory
• https://phabricator.wikimedia.org/T289798Exploit, Patch, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4970Third Party Advisory

Published

Sep 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40341DES cipher, which has inadequate encryption strength, is use…5.5
• CVE-2021-40342 In the DES implementation, the affected product versions us…9.8
• CVE-2021-40343An issue was discovered in Nagios XI 5.8.5. Insecure file pe…7.8
• CVE-2021-40344An issue was discovered in Nagios XI 5.8.5. In the Custom In…7.2
• CVE-2021-40345An issue was discovered in Nagios XI 5.8.5. In the Manage Da…7.2
• CVE-2021-40346An integer overflow exists in HAProxy 2.0 through 2.5 in htx…7.5
• CVE-2021-40348Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allow…8.8
• CVE-2021-40349e7d Speed Test (aka speedtest) 0.5.3 allows a path-traversal…5.3
• CVE-2021-4035A stored cross site scripting have been identified at the co…4.8
• CVE-2021-40350webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices…9.8
• CVE-2021-40352OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct…6.5
• CVE-2021-40353A SQL injection vulnerability exists in version 8.0 of openS…9.8