{"id":"MGASA-2014-0221","aliases":[],"status":"published","title":"Updated egroupware packages fix a cross site request forgery","description":"Updated egroupware packages fix security vulnerabilities:\n\neGroupWare before 1.8.007 allows logged in users with administrative\npriviledges to remotely execute arbitrary commands on the server.  It is\nalso vulnerable to a cross site request forgery vulnerability that allows\ncreating new administrative users.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-05-17T00:16:50Z","modified":"2026-04-16T04:29:05Z","fixes":[{"ecosystem":"Mageia:3","package":"egroupware","fixed_in":["1.8.007.20140506-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"egroupware","fixed_in":["1.8.007.20140506-1.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"egroupware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.007.20140506-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"egroupware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.007.20140506-1.mga4"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2014-0221.html","tags":["advisory"]},{"url":"http://www.egroupware.org/forum#nabble-td3997580","tags":["web"]},{"url":"http://www.egroupware.org/changelog","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13334","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2014-0221","title":"Updated egroupware packages fix a cross site request forgery","description":"Updated egroupware packages fix security vulnerabilities:\n\neGroupWare before 1.8.007 allows logged in users with administrative\npriviledges to remotely execute arbitrary commands on the server.  It is\nalso vulnerable to a cross site request forgery vulnerability that allows\ncreating new administrative users.\n","status":"published","published":"2014-05-17T00:16:50Z","modified":"2026-04-16T04:29:05.372605Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}