MGASA-2014-0221
Updated egroupware packages fix a cross site request forgery
Updated egroupware packages fix security vulnerabilities:
eGroupWare before 1.8.007 allows logged in users with administrative priviledges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability that allows creating new administrative users.
What each source reports
OSV No score
Updated egroupware packages fix a cross site request forgery
Updated egroupware packages fix security vulnerabilities:
eGroupWare before 1.8.007 allows logged in users with administrative priviledges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability that allows creating new administrative users.
- Record
MGASA-2014-0221- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
egroupwareMageia:3 |
before 1.8.007.20140506-1.mga3 | 1.8.007.20140506-1.mga3 |
egroupwareMageia:4 |
before 1.8.007.20140506-1.mga4 | 1.8.007.20140506-1.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2014-0221 is a vulnerability with no CVSS score yet in egroupware, published May 17, 2014. No source lists public exploit code. Fixed in egroupware 1.8.007.20140506-1.mga3.