CVE-2024-55919
sympa - security update
No scoreFix available
[Improper input validation on generic SSO login]
What each source reports
OSVUBUNTU-CVE-2024-55919 No score
[Improper input validation on generic SSO login]
- Record
UBUNTU-CVE-2024-55919- Updated
- 2026-11-02
OSVUSN-8552-1 No score
sympa vulnerability
It was discovered that Sympa did not properly validate input on the generic SSO login. A remote attacker could possibly use this issue to perform a path traversal attack and gain unintended access.
- Record
USN-8552-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sympaDebian:12 |
before 6.2.70~dfsg-2+deb12u1, plus listed versions 6.2.70~dfsg-2 |
6.2.70~dfsg-2+deb12u1 |
sympaDebian:13 |
before 6.2.74~dfsg-1 | 6.2.74~dfsg-1 |
sympaDebian:14 |
before 6.2.74~dfsg-1 | 6.2.74~dfsg-1 |
sympaDebian:11 |
before 6.2.60~dfsg-4+deb11u1, plus listed versions 6.2.60~dfsg-4 |
6.2.60~dfsg-4+deb11u1 |
sympaUbuntu:Pro:18.04:LTS |
before 6.2.24~dfsg-1ubuntu0.1~esm2, plus listed versions 6.2.18~dfsg-16.2.22~dfsg-16.2.24~dfsg-16.2.24~dfsg-1ubuntu0.1~esm1 |
6.2.24~dfsg-1ubuntu0.1~esm2 |
sympaUbuntu:Pro:20.04:LTS |
before 6.2.40~dfsg-4ubuntu0.20.04.1~esm2, plus listed versions 6.2.40~dfsg-16.2.40~dfsg-36.2.40~dfsg-46.2.40~dfsg-4ubuntu0.20.04.1~esm1 |
6.2.40~dfsg-4ubuntu0.20.04.1~esm2 |
sympaUbuntu:Pro:22.04:LTS |
before 6.2.66~dfsg-2ubuntu0.1~esm1, plus listed versions 6.2.60~dfsg-4build16.2.66~dfsg-16.2.66~dfsg-2 |
6.2.66~dfsg-2ubuntu0.1~esm1 |
sympaUbuntu:24.04:LTS |
before 6.2.70~dfsg-2+deb12u1build0.24.04.1, plus listed versions 6.2.70~dfsg-2 |
6.2.70~dfsg-2+deb12u1build0.24.04.1 |
sympaUbuntu:25.10 |
All versions, plus listed versions 6.2.76~dfsg-1 |
None known |
sympaUbuntu:Pro:16.04:LTS |
before 6.1.24~dfsg-1ubuntu0.1~esm1, plus listed versions 6.1.24~dfsg-1 |
6.1.24~dfsg-1ubuntu0.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-55919 is a vulnerability with no CVSS score yet in sympa, published January 1, 0001. No source lists public exploit code. Fixed in sympa 6.2.70~dfsg-2+deb12u1.