{"action":"Upgrade radicale to 1.1 or later.","affected":[{"fixed":"1.1","introduced":"0"}],"component":"radicale","cve_ids":["CVE-2015-8747"],"ecosystem":"PyPI","epss":0.03027,"exploited":false,"fixed_versions":["1.1"],"ghsa_id":"GHSA-fgqv-96v9-w23m","id":"tcs_01M5KFFA8A2AHXSYT83SR6T9E2","modified_at":"2024-10-16T21:25:05.137236Z","published_at":"2022-05-17T03:29:51Z","references":["https://osv.dev/vulnerability/GHSA-fgqv-96v9-w23m","https://nvd.nist.gov/vuln/detail/CVE-2015-8747","https://github.com/Kozea/Radicale/pull/343","https://github.com/Kozea/Radicale/commit/18c88642fb19ee1480690e51fff9605ecc6fdab5","https://github.com/Unrud/Radicale/commit/bcaf452e516c02c9bed584a73736431c5e8831f1","https://github.com/Kozea/Radicale","https://github.com/pypa/advisory-database/tree/main/vulns/radicale/PYSEC-2016-36.yaml","https://web.archive.org/web/20200804235922/http://www.securityfocus.com/bid/80255","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html","http://www.debian.org/security/2016/dsa-3462","http://www.openwall.com/lists/oss-security/2016/01/05/7","http://www.openwall.com/lists/oss-security/2016/01/06/4","http://www.openwall.com/lists/oss-security/2016/01/06/7"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-fgqv-96v9-w23m","url":"https://osv.dev/vulnerability/GHSA-fgqv-96v9-w23m"}],"summary":"Radicale vulnerable to arbitrary file read or write"}