GNOME evolution-data-server vulnerabilities (CVE)

CVE records published for GNOME evolution-data-server, newest first. Follow to get an email when a new one appears.

2 results

5.7Medium

CVE-2026-110777 24 days ago

Evolution-data-server: local file disclosure via attach file:// uris

GNOME evolution-data-server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file pat…

5.6Medium

CVE-2026-2604 4 months ago

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

GNOME Evolution Data Server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper valida…