CVE-2021-41083

CVE-2021-41083 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Dada Mail versions 11.15.1 and below. An attacker could craft a malicious webpage that, when visited by a logged-in Dada Mail user, allows the attacker to take control of the list control panel, including changing passwords and gaining complete control over mailing lists and profile logins. This vulnerability has a CVSS score of 8.8 (High), indicating a severe impact on confidentiality, integrity, and availability, with a network attack vector and low attack complexity, requiring user interaction. While confirmed through testing, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.