Sympa 6.2.59 Beta 2

CPE Details

Sympa 6.2.59 Beta 2
sympa
sympa
6.2.59
2020-12-15
12h45 +00:00
2020-12-15
12h45 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:sympa:sympa:6.2.59:beta2:*:*:*:*:*:*

Informations

Vendor

sympa

Product

sympa

Version

6.2.59

Update

beta2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-46900 2023-12-30 23h00 +00:00 Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism.
7.5
High
CVE-2018-1000671 2018-09-06 16h00 +00:00 sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.
6.1
Medium