Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | radicale | 0.7-1.1+deb7u1 |
| Debian · 8 | radicale | 0.9-1+deb8u1 |
Vulnerabilities 2
-
Critical 10.0
Radicale vulnerable to arbitrary file read or write
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
-
Medium 5.3
Radicale regex metacharacters injection in the user name
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".