What’s Vulnerable › Vulnerabilities

CVE-2014-125060: holdennb CollabCal calenderServer.cpp handleGet improper authentication

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-07 · updated 2026-06-17
• Weakness: CWE-287

Description

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as b80f6d1893607c99e5113967592417d0fe310ce6. It is recommended to apply a patch to fix this issue. VDB-217614 is the identifier assigned to this vulnerability.

Affected products

• holdennb CollabCal: before 2014-12-09 — fixed in 2014-12-09

How to fix

Upgrade to a fixed version: holdennb CollabCal 2014-12-09. Check the vendor advisory for mitigations.

References

• https://github.com/holdennb/CollabCal/commit/b80f6d1893607c99e5113967592417d0fe310ce6
• https://vuldb.com/?ctiid.217614
• https://vuldb.com/?id.217614
• https://github.com/holdennb/CollabCal/commit/b80f6d1893607c99e5113967592417d0fe310ce6
• https://vuldb.com/?ctiid.217614
• https://vuldb.com/?id.217614

Get alerted when CVE-2014-125060 or the next vulnerability affects your stack