medium5.3
CVE-2025-43921
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.
Impact
GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third parties report that they are unable to reproduce this, regardless of whether cPanel or WHM is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Mailman | from 2.1.1 through 2.1.39 |