Security Advisory
CVE-2015-1306
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.