Skip to content
OpenAdvisories
Medium USN-5157-1 1 CVE

postorius vulnerability

Published Nov 25, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Postorius mishandled specially crafted input. An
attacker could use this vulnerability that obtain sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS postorius 1.1.2-3ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS postorius 1.2.4-1ubuntu0.1

Vulnerabilities 1

  • Medium 5.4
    CVE-2021-40347

    GNU Mailman Postorius Access Control Issues

    An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first …

    postorius postorius postorius Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2021-40347