Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-38329
6.1
MEDIUMCVSS v3
Published
July 11, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected (XSS) vulnerability exists in calendar/freebusy.php, which allows unauthenticated remote attackers to inject arbitrary web script or HTML into the "user" HTTP/GET parameter, which reflects its input without sanitization.
EGroupware/egroupware
GitHubWeb based groupware server written in PHP, forum at https://help.egroupware.org/
GitHubWeb based groupware server written in PHP, forum at https://help.egroupware.org/= 17.1.20190111NVD
egroupware/egroupware
PackagistEGroupware extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office.
PackagistEGroupware extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office.= 17.1.20190111NVD