{"id":"CVE-2018-1000671","aliases":["DEBIAN-CVE-2018-1000671","DLA-1512-1","DLA-2441-1","EUVD-2018-2000","GHSA-rxx7-mqqx-phw8","UBUNTU-CVE-2018-1000671","USN-4442-1","USN-4442-2"],"status":"published","title":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open...","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03437,"percentile":0.89054,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2018-09-06T18:00:00Z","modified":"2026-10-23T18:03:18Z","exploits":[{"source":"nuclei","id":"CVE-2018-1000671","title":"Sympa version =\u003e6.2.16 - Cross-Site Scripting","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000671.yaml"}],"fixes":[{"ecosystem":"Debian:12","package":"sympa","fixed_in":["6.2.36~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sympa","fixed_in":["6.2.36~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sympa","fixed_in":["6.2.36~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sympa","fixed_in":["6.1.23~dfsg-2+deb8u3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"sympa","fixed_in":["6.2.16~dfsg-3+deb9u4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sympa","fixed_in":["6.1.17~dfsg-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sympa","fixed_in":["6.1.24~dfsg-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sympa","fixed_in":["6.2.24~dfsg-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.36~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.36~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.36~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.23~dfsg-2+deb8u3"}]}],"versions":["6.1.23~dfsg-2","6.1.23~dfsg-2+deb8u1","6.1.23~dfsg-2+deb8u2"]},{"source":"osv","ecosystem":"Debian:9","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.16~dfsg-3+deb9u4"}]}],"versions":["6.2.16~dfsg-3","6.2.16~dfsg-3+deb9u1","6.2.16~dfsg-3+deb9u2","6.2.16~dfsg-3+deb9u3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.17~dfsg-1ubuntu0.1~esm1"}]}],"versions":["6.1.11~dfsg-5","6.1.17~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.24~dfsg-1ubuntu0.1~esm1"}]}],"versions":["6.1.24~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24~dfsg-1ubuntu0.1~esm1"}]}],"versions":["6.2.18~dfsg-1","6.2.22~dfsg-1","6.2.24~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.17~dfsg-1ubuntu0.1~esm1"}]}],"versions":["6.1.11~dfsg-5","6.1.17~dfsg-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.24~dfsg-1ubuntu0.1~esm1"}]}],"versions":["6.1.24~dfsg-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24~dfsg-1ubuntu0.1~esm1"}]}],"versions":["6.2.18~dfsg-1","6.2.22~dfsg-1","6.2.24~dfsg-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sympa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.40~dfsg-4ubuntu0.20.04.1~esm1"}]}],"versions":["6.2.40~dfsg-1","6.2.40~dfsg-3","6.2.40~dfsg-4"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"sympa","product":"sympa"}],"references":[{"url":"https://github.com/sympa-community/sympa/issues/268","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00023.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4442-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000671"},{"url":"https://github.com/advisories/GHSA-rxx7-mqqx-phw8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000671","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1000671","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4442-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4442-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10936","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-1000671","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2018-09-06T18:00:00Z","modified":"2024-08-05T12:40:47.942Z","updated_at":"2026-11-02T14:35:10.685174Z"}],"euvd":[{"id":"EUVD-2018-2000","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2018-09-06T18:00:00Z","modified":"2024-08-05T12:40:47Z","updated_at":"2026-11-03T02:39:26.268404Z"}],"ghsa":[{"id":"GHSA-rxx7-mqqx-phw8","title":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open...","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2022-05-13T01:13:45Z","modified":"2023-02-01T05:04:20Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:50:08.898362Z"}],"nvd":[{"id":"CVE-2018-1000671","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2018-09-06T18:29:00.27Z","modified":"2026-06-17T01:33:04.02Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:04:38.672108Z"}],"osv":[{"id":"CVE-2018-1000671","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2018-09-06T18:29:00.27Z","modified":"2026-03-15T22:18:15.369257Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-1000671","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2018-09-06T18:29:00.27Z","modified":"2026-10-23T18:03:18.478322257Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-1000671","description":"sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The \"referer\" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.","status":"published","published":"2018-09-06T18:29:00Z","modified":"2026-02-04T02:51:14.373962Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1512-1","title":"sympa - security update","status":"published","published":"2018-09-21T00:00:00Z","modified":"2026-03-09T01:22:48.293548Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2441-1","title":"sympa - security update","status":"published","published":"2020-11-09T00:00:00Z","modified":"2026-03-09T01:19:32.628179Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"USN-4442-1","title":"sympa vulnerabilities","description":"Michael Kaczmarczik discovered that Sympa incorrectly handled HTTP\nGET/POST requests. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. (CVE-2018-1000550)\n\nIt was discovered that Sympa incorrectly handled URL parameters. An\nattacker could possibly use this issue to perform XSS attacks.\n(CVE-2018-1000671)\n\nNicolas Chatelain discovered that Sympa incorrectly handled environment\nvariables. An attacker could possibly use this issue with a setuid\nbinary and gain root privileges. (CVE-2020-10936)\n","status":"published","published":"2020-07-28T19:09:32Z","modified":"2026-02-10T04:41:54Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4442-2","title":"sympa vulnerabilities","description":"USN-4442-1 fixed vulnerabilities in Sympa. This update provides the\ncorresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu\n20.04 ESM. Original advisory details:\n\nNicolas Chatelain discovered that Sympa incorrectly handled environment\nvariables. An attacker could possibly use this issue with a setuid\nbinary and gain root privileges. (CVE-2020-10936)\n\nMichael Kaczmarczik discovered that Sympa incorrectly handled HTTP\nGET/POST requests. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected Ubuntu 16.04\nESM and Ubuntu 18.04 ESM. (CVE-2018-1000550)\n\nIt was discovered that Sympa incorrectly handled URL parameters. An\nattacker could possibly use this issue to perform XSS attacks. This issue only\naffected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-1000671)\n","status":"published","published":"2021-03-15T22:14:00Z","modified":"2026-06-25T13:30:08.374982433Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}