PatchTheCVEsympa vulnerabilities and fixes
Recent CVEs affecting sympa, with upgrade or downgrade steps. 1 tracked.
sympa has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-12-31. Highest priority: CVE-2021-46900 (score 39/100).
- CVE-2021-46900 HIGH 7.5 UPGRADE Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that thi
FAQ
How do I fix sympa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sympa being exploited right now?
None of the tracked sympa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sympa CVE should I patch first?
CVE-2021-46900 currently ranks highest (39/100): Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that thi.