First published: Thu Sep 06 2018(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
debian/sympa | 6.2.60~dfsg-4 6.2.70~dfsg-2 6.2.72~dfsg-1 | |
Sympa Sympa | >=6.2.16 | |
Debian GNU/Linux | =8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1000671 is classified as a medium severity vulnerability due to the potential for open redirection and reflected XSS attacks.
To fix CVE-2018-1000671, upgrade to the latest version of Sympa, version 6.2.60 or later.
CVE-2018-1000671 affects Sympa versions from 6.2.16 up to, but not including, 6.2.60.
CVE-2018-1000671 can facilitate open redirection and reflected cross-site scripting (XSS) attacks.
CVE-2018-1000671 involves the 'referer' parameter of the wwsympa.fcgi login action.