CVE-2014-1306
Updated sympa packages fix CVE-2015-1306
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none
- Record
CVE-2014-1306- Updated
- 2026-11-02
EUVDEUVD-2014-1384 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none
- Record
EUVD-2014-1384- Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none
- Record
CVE-2014-1306- Updated
- 2026-11-02
OSVMGASA-2015-0085 No score
Updated sympa packages fix CVE-2015-1306
Updated sympa packages fix security vulnerability:
A vulnerability have been discovered in Sympa web interface that allows access to files on the server filesystem. This breach allows to send to a list or a user any file readable by the Sympa user, located on the server filesystem, using the Sympa web interface newsletter posting area (CVE-2015-1306).
- Record
MGASA-2015-0085- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sympaMageia:4 |
before 6.1.17-3.3.mga4 | 6.1.17-3.3.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1306 has been rejected by its source and should not be treated as a live vulnerability, published February 26, 2015. Fixed in sympa 6.1.17-3.3.mga4.