Vulnerability in Egroupware

CVE-2005-1129

eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.

EPSS: 0.004 (29.7th percentile) — read the EPSS interpretation.

Affected products

  • Egroupware — versions 1.0.1, 1.0.6
  • N/a — versions n/a

References