CVE Catalog
CVE-2015-8747
CriticalSummary
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
Risk Assessment
Attackers can gain access to sensitive data or introduce malicious files, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to upgrade Radicale to version 1.1 or later to mitigate this vulnerability.
Original NVD description (English source)
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.