7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.4%
eGroupWare is a suite of web-based group applications including calendar, address book, messenger and email.
It was found that eGroupWare contains multiple code injection vulnerabilities in multiple parameters and routes because of improper input sanitization.
A remote attacker could execute arbitrary code, delete arbitrary files or inject arbitrary PHP objects via multiple routes.
There is no known workaround at this time.
Gentoo has discontinued support for eGroupWare and recommends that users unmerge the package:
# emerge --unmerge "www-apps/egroupware"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | www-apps/egroupware | <= 1.8.004.20120613 | UNKNOWN |