CVE-2015-8748

5

MEDIUMCVSS v2

Published

February 3, 2016

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".

Radicale

Python Package IndexCalDAV and CardDAV Server

<= 1.0.1, < 1.1NVD

Kozea/Radicale

GitHubA simple CalDAV (calendar) and CardDAV (contact) server.

<= 1.0.1, < 1.1NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2015-8748

Description

More on this CVE