USN-4442-2 sympa vulnerabilities

🗓️ 15 Mar 2021 22:14:00Reported by GoogleType

Sympa fixes: environment variable handling, HTTP request issues, and URL parameter XSS on Ubuntu sixteen four esm to twenty four esm.

Reporter	Title	Published	Views	Family All 84
BDU FSTEC	The vulnerability in the web interface (wwsympa.fcgi) of the Sympa mailing list manager allows a perpetrator to escalate their privileges.	12 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Sympa mailing list managers, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Sympa mailing list managers, related to the use of open redirection, allows attackers to compromise the confidentiality and integrity of the protected information.	27 Apr 202100:00	–	bdu_fstec
Huntr	Cross-site Scripting (XSS) - Reflected in keystonejs/keystone	30 Dec 202116:29	–	huntr
Circl	CVE-2020-10936	27 May 202022:55	–	circl
CNVD	Sympa Path Traversal Vulnerability	9 Jul 201800:00	–	cnvd
CNVD	Sympa Open Redirect Vulnerability	10 Sep 201800:00	–	cnvd
CNVD	Sympa Elevation of Privilege Vulnerability	28 May 202000:00	–	cnvd
CVE	CVE-2018-1000550	26 Jun 201816:00	–	cve
CVE	CVE-2018-1000671	6 Sep 201818:00	–	cve

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-4442-2
ubuntu	www.ubuntu.com/security/CVE-2018-1000550
ubuntu	www.ubuntu.com/security/CVE-2018-1000671
ubuntu	www.ubuntu.com/security/CVE-2020-10936