CVE-2009-4824

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-27 · updated 2026-06-16

Description

Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."

Affected products

Kolab Server: through 2.2.2; 2.1.0, 2.1.0-beta1, 2.1.0-beta2, 2.1.0-beta3, 2.1.0-beta4, 2.1.0-rc1 (+11)

References

http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt
http://osvdb.org/61301
http://secunia.com/advisories/37918
http://www.mandriva.com/security/advisories?name=MDVSA-2010:108
http://www.securityfocus.com/bid/37465
http://www.vupen.com/english/advisories/2010/1245
http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt
http://osvdb.org/61301
http://secunia.com/advisories/37918
http://www.mandriva.com/security/advisories?name=MDVSA-2010:108
http://www.securityfocus.com/bid/37465
http://www.vupen.com/english/advisories/2010/1245

Get alerted when CVE-2009-4824 or the next vulnerability affects your stack