GNOME evolution-data-server güvenlik açıkları (CVE)

GNOME evolution-data-server için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

5.7Orta

CVE-2026-110777 23 gün önce

Evolution-data-server: local file disclosure via attach file:// uris

GNOME evolution-data-server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file pat…

5.6Orta

CVE-2026-2604 4 ay önce

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

GNOME Evolution Data Server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper valida…