CVE-2025-43919

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 20, 2025

Updated: Apr 28, 2025

CWE ID 24

CWE ID 22

Summary

CVE-2025-43919 is a vulnerability affecting GNU Mailman 2.1.39, a component bundled in cPanel and WHM. The issue allows unauthenticated attackers to read arbitrary files by exploiting a directory traversal vulnerability in the private archive authentication endpoint of Mailman through the "username" parameter. This vulnerability could potentially expose sensitive information. However, it's important to note that multiple third parties have reportedly been unable to reproduce the issue, regardless of whether they use cPanel or WHM.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

GNU Mailman

Affected Vendors

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/5XY657
https://www.cve.org/CVERecord?id=CVE-2025-43919
https://nvd.nist.gov/vuln/detail/CVE-2025-43919

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

GrayAlpha Uses Diverse Infection Vectors to Deploy PowerNet Loader and NetSupport RAT

Know What Matters

For Customers

For Partners