PT-2017-5801 · Renaud Dubois Christophe Wolfhugel Others As Part Of The Sympa Community · Sympa

Publicado 2015-02-26 · Atualizado 2015-02-26 · CVE-2014-1306

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Sympa (affected versions not specified)

Description A security issue has been found in the Sympa web interface, allowing access to files on the server filesystem. This issue enables sending any file readable by the Sympa user, located on the server filesystem, using the Sympa web interface newsletter posting area.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-1306

MGASA-2015-0085

Produtos afetados

Sympa

Referências · 5

• https://osv.dev/vulnerability/MGASA-2015-0085 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=15097 · Nota
• https://debian.org/security/2015/dsa-3134 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0085.html · Nota de Segurança
• https://sympa.org/security_advisories#security_breaches_in_newsletter_posting · Nota