Cross-Site Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users…CVE-2016-6893Gnu · 1.6% likely

   CWE-352

2. Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.CVE-2016-7123Gnu · 1.5% likely

   CWE-352

3. GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of…CVE-2021-42097Gnu · 1.3% likely

   CWE-352

4. In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.CVE-2021-44227Gnu · 0.8% likely

   CWE-352

5. Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.phpCVE-2024-27631Gnu · CVSS 6 · 0.4% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.