Test ID:	1.3.6.1.4.1.25623.1.0.154377
Category:	Web application abuses
Title:	Postorius < 1.3.5 Unsubscribe Vulnerability
Summary:	Postorius is prone to an unsubscribe vulnerability.
Description:	Summary: Postorius is prone to an unsubscribe vulnerability. Vulnerability Insight: An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place. Affected Software/OS: Postorius prior to version 1.3.5. Solution: Update to version 1.3.5 or later. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-40347 Debian Security Information: DSA-4970 (Google Search) https://www.debian.org/security/2021/dsa-4970 https://gitlab.com/mailman/postorius/-/issues/531 https://gitlab.com/mailman/postorius/-/tags https://phabricator.wikimedia.org/T289798
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.