{"action":"Upgrade radicale to 1.1 or later.","affected":[{"fixed":"1.1","introduced":"0"}],"component":"radicale","cve_ids":["CVE-2015-8748"],"ecosystem":"PyPI","epss":0.02237,"exploited":false,"fixed_versions":["1.1"],"ghsa_id":"GHSA-6w8c-6jrg-qwj2","id":"tcs_01M5KF4B3PZ9KNTDAN53C0J1WA","modified_at":"2024-10-16T21:09:20.219075Z","published_at":"2022-05-17T03:29:52Z","references":["https://osv.dev/vulnerability/GHSA-6w8c-6jrg-qwj2","https://nvd.nist.gov/vuln/detail/CVE-2015-8748","https://github.com/Kozea/Radicale/pull/341","https://github.com/Kozea/Radicale/commit/1109973a925970353dfd13c6df8de0e4e446d983","https://github.com/Unrud/Radicale/commit/4bfe7c9f7991d534c8b9fbe153af9d341f925f98","https://github.com/Kozea/Radicale","https://github.com/pypa/advisory-database/tree/main/vulns/radicale/PYSEC-2016-37.yaml","https://pypi.org/project/radicale","https://web.archive.org/web/20200804235922/http://www.securityfocus.com/bid/80255","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html","http://www.debian.org/security/2016/dsa-3462","http://www.openwall.com/lists/oss-security/2016/01/05/7","http://www.openwall.com/lists/oss-security/2016/01/06/4"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-6w8c-6jrg-qwj2","url":"https://osv.dev/vulnerability/GHSA-6w8c-6jrg-qwj2"}],"summary":"Radicale regex metacharacters injection in the user name"}