Vulnerability Description
The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This vulnerability appears to have been fixed in 6.2.32.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sympa | Sympa | < 6.2.32 |
| Debian | Debian Linux | 8.0 |
Related Weaknesses (CWE)
References
- https://lists.debian.org/debian-lts-announce/2018/07/msg00033.htmlMailing ListThird Party Advisory
- https://sympa-community.github.io/security/2018-001.htmlPatchVendor Advisory
- https://usn.ubuntu.com/4442-1/
- https://www.debian.org/security/2018/dsa-4285
- https://lists.debian.org/debian-lts-announce/2018/07/msg00033.htmlMailing ListThird Party Advisory
- https://sympa-community.github.io/security/2018-001.htmlPatchVendor Advisory
- https://usn.ubuntu.com/4442-1/
- https://www.debian.org/security/2018/dsa-4285
FAQ
What is CVE-2018-1000550?
CVE-2018-1000550 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify file...
How severe is CVE-2018-1000550?
CVE-2018-1000550 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-1000550?
Check the references section above for vendor advisories and patch information. Affected products include: Sympa Sympa, Debian Debian Linux.