Listserv vulnerabilities

1 known vulnerability in Listserv from Lsoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Listserv: Authorization Bypass Through User-Controlled Key

  CVE-2022-40319Jan 17, 2023LsoftEPSS 7.39%

  The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL. The impact is unauthorized modification of a victim's LISTSERV account.