PyPI/radicale CVE-2015-8747: critical 10, EPSS 3.03%

Radicale vulnerable to arbitrary file read or write

Action: Upgrade radicale to 1.1 or later.

pip install radicale==1.1

Affected

Fixed versions

Sources

• osv: GHSA-fgqv-96v9-w23m
• https://nvd.nist.gov/vuln/detail/CVE-2015-8747
• https://github.com/Kozea/Radicale/pull/343
• https://github.com/Kozea/Radicale/commit/18c88642fb19ee1480690e51fff9605ecc6fdab5
• https://github.com/Unrud/Radicale/commit/bcaf452e516c02c9bed584a73736431c5e8831f1
• https://github.com/Kozea/Radicale
• https://github.com/pypa/advisory-database/tree/main/vulns/radicale/PYSEC-2016-36.yaml
• https://web.archive.org/web/20200804235922/http://www.securityfocus.com/bid/80255
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html
• http://www.debian.org/security/2016/dsa-3462
• http://www.openwall.com/lists/oss-security/2016/01/05/7
• http://www.openwall.com/lists/oss-security/2016/01/06/4
• http://www.openwall.com/lists/oss-security/2016/01/06/7

CVE-2015-8747 · published 2022-05-17T03:29:51Z · modified 2024-10-16T21:25:05.137236Z · JSON