Skip to content
OpenAdvisories

Package · PyPI

radicale

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0

    Radicale vulnerable to arbitrary file read or write

    The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.

  • Critical 10.0

    Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component

    The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.