CVE-2016-1505

Critical

Published: 03/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The filesystem storage backend in Radicale before version 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path.

Risk Assessment

Attackers may gain access to sensitive data or introduce malicious files, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update Radicale to the latest version to mitigate this vulnerability and restrict filesystem access for unauthorized users.

Original NVD description (English source)

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.