GNOME evolution-data-server Schwachstellen (CVE)

Für GNOME evolution-data-server veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

5.7Mittel

CVE-2026-110777 vor 23 Tagen

Evolution-data-server: local file disclosure via attach file:// uris

GNOME evolution-data-server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file pat…

5.6Mittel

CVE-2026-2604 vor 4 Monaten

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

GNOME Evolution Data Server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper valida…