CVE-2018-1000550: Path Traversal
Last updated 25 August 2025
Other sources
The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This vulnerability appears to have been fixed in 6.2.32.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000550?
CVE-2018-1000550 is classified as a high-severity vulnerability due to its potential for unauthorized file creation or modification on the server filesystem.
How do I fix CVE-2018-1000550?
To fix CVE-2018-1000550, upgrade Sympa to version 6.2.32 or later, or apply the appropriate security patches provided by your distribution.
Which versions of Sympa are affected by CVE-2018-1000550?
CVE-2018-1000550 affects all versions of Sympa prior to version 6.2.32.
Can CVE-2018-1000550 be exploited remotely?
Yes, CVE-2018-1000550 can be exploited remotely via HTTP, allowing an attacker to leverage the vulnerability without direct access to the server.
Is there a specific operating system impacted by CVE-2018-1000550?
Yes, Debian Linux 8.0 is specifically mentioned as being impacted by CVE-2018-1000550 when running the vulnerable version of Sympa.