Sympa vulnerabilities

Products

• Sympa 13

Newest

• sympa Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not... CVE-2021-46900 Fix available 7.5 HighDecember 31, 2023
• sympa, debian linux, fedoraproject fedora +2 more Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any... CVE-2020-29668 Fix available 3.7 LowDecember 10, 2020
• sympa, debian linux, fedoraproject fedora +2 more Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full... CVE-2020-26880 Fix available 7.8 HighOctober 7, 2020
• sympa, debian linux +1 more debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for... CVE-2020-26932 Fix available 4.3 MediumOctober 7, 2020
• sympa, canonical ubuntu linux, debian linux +1 more +3 more Sympa before 6.2.56 allows privilege escalation. CVE-2020-10936 Fix available 7.8 HighMay 27, 2020
• sympa, debian linux, fedoraproject fedora +2 more Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk... CVE-2020-9369 Fix available 7.5 HighFebruary 24, 2020
• sympa, debian linux +1 more sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open... CVE-2018-1000671 Fix available 6.1 MediumSeptember 6, 2018
• sympa, debian linux +1 more The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal... CVE-2018-1000550 Fix available 9.8 CriticalJune 26, 2018
• sympa The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6... CVE-2015-1306 Fix available 5.0 MediumJanuary 20, 2015
• sympa The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does... CVE-2012-2352 Fix available 7.5 HighMay 20, 2012
• sympa sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on... CVE-2008-4476 Fix available 6.9 MediumOctober 7, 2008
• sympa Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e... CVE-2008-1648 Fix available 5.0 MediumApril 2, 2008
• sympa Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier... CVE-2004-1735 Public exploitFix available 4.3 MediumAugust 21, 2004