{
  "cveId": "CVE-2018-1000671",
  "url": "https://patchblox.com/security/cve/CVE-2018-1000671",
  "summary": "CVE-2018-1000671 is fixed in sympa on 1 platform by sympa 6.2.24~dfsg-1ubuntu0.1~esm1 (version 6.2.24~dfsg-1ubuntu0.1~esm1), released May 27, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "sympa: sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027) vulnerability...",
  "description": "sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027) vulnerability in The \u0022referer\u0022 parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim\u0027s browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.",
  "published": "2018-09-06T11:29:00Z",
  "severity": "Medium",
  "epss": 0.03437,
  "epssPercentile": 0.8904,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "sympa",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "6.2.24~dfsg-1ubuntu0.1~esm1",
      "fix": "sympa 6.2.24~dfsg-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-sympa-6.2.24-dfsg-1ubuntu0.1-esm1",
      "released": "2020-05-27T11:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}