Medium severity5.3NVD Advisory· Published Feb 3, 2016· Updated Jun 17, 2026
CVE-2015-8748
CVE-2015-8748
Description
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
RadicalePyPI | < 1.1 | 1.1 |
Affected products
2Patches
Vulnerability mechanics
References
14- github.com/Kozea/Radicale/pull/341nvdPatchVendor AdvisoryWEB
- github.com/advisories/GHSA-6w8c-6jrg-qwj2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2015-8748ghsaADVISORY
- lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.htmlnvdWEB
- lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.htmlnvdWEB
- www.debian.org/security/2016/dsa-3462nvdWEB
- www.openwall.com/lists/oss-security/2016/01/05/7nvdWEB
- www.openwall.com/lists/oss-security/2016/01/06/4nvdWEB
- github.com/Kozea/Radicale/commit/1109973a925970353dfd13c6df8de0e4e446d983ghsaWEB
- github.com/Unrud/Radicale/commit/4bfe7c9f7991d534c8b9fbe153af9d341f925f98nvdWEB
- github.com/pypa/advisory-database/tree/main/vulns/radicale/PYSEC-2016-37.yamlghsaWEB
- pypi.org/project/radicaleghsaWEB
- web.archive.org/web/20200804235922/http://www.securityfocus.com/bid/80255ghsaWEB
- www.securityfocus.com/bid/80255nvd
News mentions
0No linked articles in our index yet.