Skip to content
Fencer Intel
critical 9.8

CVE-2018-1000550 json

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing fun…

published 8y ago modified 4mo ago also EUVD-2018-1939

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.5%
EPSS 2.5% chance of exploitation in 30 days, percentile 85%
public exploits
0
none known

Summary

The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing function that can result in Possibility to create or modify files on the server filesystem. This attack appear to be exploitable via HTTP GET/POST request. This vulnerability appears to have been fixed in 6.2.32.

Patch / fix

  • sympa sympa 6.2.32
  • sympa Debian 14, Debian 13, Debian 12 6.2.32~dfsg-1

debian advisories DEBIAN-CVE-2018-1000550

  • sympa Ubuntu Pro 14.04 LTS 6.1.17~dfsg-1ubuntu0.1~esm1
  • sympa Ubuntu Pro 16.04 LTS 6.1.24~dfsg-1ubuntu0.1~esm1
  • sympa Ubuntu Pro 18.04 LTS 6.2.24~dfsg-1ubuntu0.1~esm1

ubuntu advisories UBUNTU-CVE-2018-1000550

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Is CVE-2018-1000550 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

2.54% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.