{"id":"CVE-2014-1306","aliases":["EUVD-2014-1384","MGASA-2015-0085"],"status":"rejected","title":"Updated sympa packages fix CVE-2015-1306","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-02-26T08:26:53Z","modified":"2026-04-16T06:23:00Z","fixes":[{"ecosystem":"Mageia:4","package":"sympa","fixed_in":["6.1.17-3.3.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.17-3.3.mga4"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2015-0085.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15097","tags":["report"]},{"url":"https://www.sympa.org/security_advisories#security_breaches_in_newsletter_posting","tags":["advisory"]},{"url":"https://www.debian.org/security/2015/dsa-3134","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-1306","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none","status":"rejected","published":"2017-05-11T14:01:00Z","modified":"2017-05-11T13:57:01Z","updated_at":"2026-11-02T14:33:45.938615Z"}],"euvd":[{"id":"EUVD-2014-1384","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none","status":"published","published":"2017-05-11T14:01:00Z","modified":"2017-05-11T13:57:01Z","updated_at":"2026-11-03T04:08:03.816722Z"}],"nvd":[{"id":"CVE-2014-1306","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none","status":"rejected","published":"2017-05-11T14:29:33.42Z","modified":"2023-11-07T02:18:51.767Z","updated_at":"2026-11-02T14:02:58.701118Z"}],"osv":[{"id":"MGASA-2015-0085","title":"Updated sympa packages fix CVE-2015-1306","description":"Updated sympa packages fix security vulnerability:\n\nA vulnerability have been discovered in Sympa web interface that allows access\nto files on the server filesystem. This breach allows to send to a list or a\nuser any file readable by the Sympa user, located on the server filesystem,\nusing the Sympa web interface newsletter posting area (CVE-2015-1306).\n","status":"published","published":"2015-02-26T08:26:53Z","modified":"2026-04-16T06:23:00.145748172Z","updated_at":"2026-11-02T15:49:39.488462Z"}]}}