Search for packages
| purl | pkg:pypi/radicale@0.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2awy-8tkx-3fe2
Aliases: CVE-2015-8748 GHSA-6w8c-6jrg-qwj2 PYSEC-2016-37 |
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*". |
Affected by 1 other vulnerability. |
|
VCID-dw4s-1un9-3qg1
Aliases: CVE-2017-8342 GHSA-rpv4-63g3-9x23 PYSEC-2017-102 |
Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-j4yd-fdnt-vub6
Aliases: CVE-2015-8747 GHSA-fgqv-96v9-w23m PYSEC-2016-36 |
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name. |
Affected by 1 other vulnerability. |
|
VCID-unc1-fh32-v3gh
Aliases: CVE-2016-1505 GHSA-84cw-mxhv-qvv4 |
Path Traversal The filesystem storage backend in Radicale on Windows allows remote attackers to read or write to arbitrary files via a crafted path. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||