[SECURITY] [DLA 2034-1] davical security update

🗓️ 14 Dec 2019 05:43:22Reported by DebianType

davical security update to fix multiple cross-site scripting and cross-site request forgery issue

Reporter	Title	Published	Views	Family All 56
BDU FSTEC	The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in mechanisms for combating cross-site fraud, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DAViCal calendar exchange server, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.	7 May 202000:00	–	bdu_fstec
Circl	CVE-2019-18345	11 Mar 202408:41	–	circl
Circl	CVE-2019-18346	7 Mar 202412:07	–	circl
Circl	CVE-2019-18347	7 Mar 202412:41	–	circl
CNVD	DAViCal Cross-Site Request Forgery Vulnerability	5 Dec 201900:00	–	cnvd
CNVD	DAViCal CalDAV Server Cross-Site Scripting Vulnerability	11 Dec 201900:00	–	cnvd
Check Point Advisories	Arbitrary Code Execution Over HTTP Traffic (CVE-2011-2523; CVE-2019-18345; CVE-2019-19143; CVE-2020-15492; CVE-2020-16210; CVE-2020-21526; CVE-2020-24379; CVE-2020-6142; CVE-2020-8010; CVE-2020-9380)	18 Nov 202000:00	–	checkpoint_advisories
CVE	CVE-2019-18345	12 Dec 201913:54	–	cve