CVE-2016-1505
moderate-risk
Published 2016-02-03
The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.
Do I need to act?
~
1.4% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: b4b3d51f33c7623d312f289252dd7bbb8f58bbe6
10
CVSS 10.0/10
Critical
NETWORK
/ LOW complexity
Affected Products (1)
Radicale
Affected Vendors
References (14)
42
/ 100
moderate-risk
Severity
33/34 · Critical
Exploitability
4/34 · Minimal
Exposure
5/34 · Minimal