Michael Kaczmarczik

Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.32 Description: The issue is related to a directory traversal vulnerability in the wwsympa.fcgi template editing function of the Sympa mailing list manager. This vulnerability can be exploited via specially crafted HTTP GET/POST requests, potentially allowing a remote attacker to elevate privileges and create or modify files on the server filesystem. Recommendations: For versions prior to 6.2.32, update to version 6.2.32 or later to resolve the issue. As a temporary workaround, consider restricting access to the wwsympa.fcgi template editing function until a patch is applied.