CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism.

• CWE-327
• CWE-327

• https://github.com/sympa-community/sympa-community.github.io/blob/master/security/2021-001.mdMitigation, Vendor Advisory
• https://github.com/sympa-community/sympa/issues/1091Issue Tracking, Mitigation, Vendor Advisory
• https://www.sympa.community/security/2021-001.htmlMitigation, Vendor Advisory
• https://github.com/sympa-community/sympa-community.github.io/blob/master/security/2021-001.mdMitigation, Vendor Advisory
• https://github.com/sympa-community/sympa/issues/1091Issue Tracking, Mitigation, Vendor Advisory
• https://www.sympa.community/security/2021-001.htmlMitigation, Vendor Advisory

Published

Dec 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46894Use After Free (UAF) vulnerability in the uinput module.Succ…9.8
• CVE-2021-46895Vulnerability of defects introduced in the design process in…9.1
• CVE-2021-46896Buffer Overflow vulnerability in PX4-Autopilot allows attack…7.5
• CVE-2021-46897views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed…6.5
• CVE-2021-46898views/switch.py in django-grappelli (aka Django Grappelli) b…6.1
• CVE-2021-46899SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework)…7.8
• CVE-2021-46901examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka…7.5
• CVE-2021-46902An issue was discovered in LTOS-Web-Interface in Meinberg LA…7.2
• CVE-2021-46903An issue was discovered in LTOS-Web-Interface in Meinberg LA…6.5
• CVE-2021-46904In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46905In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-46906In the Linux kernel, the following vulnerability has been re…5.5