{"id":"CVE-2015-0258","aliases":["DEBIAN-CVE-2015-0258","DLA-2125-1","EUVD-2015-0278","GHSA-2hf9-vh2r-j6vp","UBUNTU-CVE-2015-0258","USN-4590-1"],"status":"published","title":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser...","description":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03781,"percentile":0.90025,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-434"],"published":"2020-02-17T17:46:29Z","modified":"2026-06-17T00:19:50Z","fixes":[{"ecosystem":"Debian:8","package":"collabtive","fixed_in":["2.0+dfsg-5+deb8u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"collabtive","fixed_in":["2.0+dfsg-6ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:8","package":"collabtive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+dfsg-5+deb8u1"}]}],"versions":["2.0+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"collabtive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+dfsg-6ubuntu1.1"}]}],"versions":["2.0+dfsg-6","2.0+dfsg-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"collabtive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+dfsg-6ubuntu1.1"}]}],"versions":["2.0+dfsg-6","2.0+dfsg-6ubuntu1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"o-dyn","product":"collabtive"}],"references":[{"url":"http://packetstormsecurity.com/files/133736/Collabtive-2.0-Shell-Upload.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","report"]},{"url":"https://github.com/philippK-de/Collabtive/commit/9ce6301583669d0a8ecb4d23fb56e34b68511335","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00031.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4590-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0258"},{"url":"https://github.com/advisories/GHSA-2hf9-vh2r-j6vp"},{"url":"https://ubuntu.com/security/CVE-2015-0258","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4590-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0258","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-0258","description":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.","status":"published","published":"2020-02-17T17:46:29Z","modified":"2024-08-06T04:03:10.663Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0278","description":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.","status":"published","published":"2020-02-17T17:46:29Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-2hf9-vh2r-j6vp","title":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser...","description":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.","status":"published","published":"2022-05-24T17:09:08Z","modified":"2023-01-29T05:01:30Z","cwes":["CWE-434"],"updated_at":"2026-11-02T14:44:50.331765Z"}],"nvd":[{"id":"CVE-2015-0258","description":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.","status":"published","published":"2020-02-17T18:15:11.607Z","modified":"2026-06-17T00:19:50.623Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:03:19.73542Z"}],"osv":[{"id":"UBUNTU-CVE-2015-0258","description":"Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.","status":"published","published":"2020-02-17T18:15:00Z","modified":"2026-02-04T02:38:11.95609Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"DLA-2125-1","title":"collabtive - security update","status":"published","published":"2020-02-28T00:00:00Z","modified":"2026-03-09T01:18:43.411354Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"USN-4590-1","title":"collabtive vulnerability","description":"It was discovered that Collabtive did not properly validate avatar image\nfile uploads. An authenticated user could exploit this with a crafted file\nto cause Collabtive to execute arbitrary code. (CVE-2015-0258)\n","status":"published","published":"2020-10-19T16:27:59Z","modified":"2026-02-10T04:41:57Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}