CVE-2015-8747

The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.

Date published : 2016-02-03

http://www.securityfocus.com/bid/80255

https://github.com/Kozea/Radicale/pull/343