Skip to content
OpenAdvisories
High DLA-2187-1 1 CVE

radicale - security update

Published Apr 25, 2020 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 radicale 0.9-1+deb8u2

Vulnerabilities 1

  • High 8.1

    Radicale is vulnerable to timing oracles and simple bruteforce attacks

    Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.