CVE-2016-1505
Publication date 3 February 2016
Last updated 25 August 2025
Ubuntu priority
Description
The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| radicale | ||
| 14.04 LTS trusty | Not in release | |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
10.0 · Critical
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N