Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 6.0 | radicale | 0.3-2+deb6u1 |
Vulnerabilities 2
-
Critical 10.0
Radicale vulnerable to arbitrary file read or write
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
-
Medium 5.3
Radicale regex metacharacters injection in the user name
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".