CVE-2014-125060

KRITISCH 9.8CVE-2014-125060 · Published 07/01/2023 · updated 17/06/2026

Kurz gesagt

CVE-2014-125060 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in collabcal (collabcal project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.0%, höher als bei 64.0% aller Schwachstellen.
Abhilfe: auf 2014-12-09 oder neuer aktualisieren.

Package	Affected versions	Patched versions
collabcal collabcal_project	`< 2014-12-09`	`2014-12-09`

Description

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as b80f6d1893607c99e5113967592417d0fe310ce6. It is recommended to apply a patch to fix this issue. VDB-217614 is the identifier assigned to this vulnerability.

References

holdennb/CollabCal commit b80f6d1 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free