CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2021-40347
Severity
MEDIUM
CVSS
5.4
EPSS
1.18%
Original NVD Description
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.
Related CVEs
Other vulnerabilities affecting the same vendor(s)