CVE-2021-42097 Cross-site request forgery in n/a
An attacker can exploit a non-user-specific CSRF token to perform actions as an admin, leading to privilege escalation and account takeover.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-42097?
CVE-2021-42097 is a high-severity vulnerability in Debian Debian Linux, published on 21 Oct 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).
Weakness: CWE-352
Which versions are affected by CVE-2021-42097?
It affects 2 products.
Products include Debian Debian Linux, Gnu Mailman.
How do I fix CVE-2021-42097?
Upgrade to a fixed version.
Is CVE-2021-42097 being exploited?
There is no known exploitation of CVE-2021-42097 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-vj65-f4hc-r425, UBUNTU-CVE-2021-42097.