CVE-2021-27181

CVE-2021-27181 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting MDaemon before version 20.0.4, specifically within its Remote Administration interface. An attacker can exploit this by fixing the anti-CSRF token, then tricking a user into clicking a malicious URL and authenticating. This allows the attacker to execute arbitrary actions with the victim's privileges, leading to high impact on confidentiality, integrity, and availability. While the CVSS score is 8.8, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat landscape.