CVE-2010-3313: EGroupware Code Injection Vulnerability
Summary
CVE-2010-3313: EGroupware Code Injection vulnerability. Affects egroupware/egroupware across 3 version ranges.
< 1.6.003
>= 9.1, < 9.1.20100309
>= 9.2, < 9.2.20100309
Fixed in 1.6.003, 9.1.20100309 or 9.2.20100309, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
EGroupware is an open-source groupware application that provides a suite of tools for collaboration, project management, and communication. It is designed to help teams work together more efficiently by offering features such as document management, calendar sharing, and task tracking. However, certain versions of EGroupware have been found to be vulnerable to a code injection issue, which can allow attackers to execute arbitrary commands on the server.
Vulnerability Detail
The vulnerability exists in the 'spellchecker.php' file located in the 'phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/' directory of EGroupware versions 1.4.001+.002, 1.6.001+.002, and possibly earlier versions before 1.6.003. It allows remote attackers to exploit shell metacharacters in the 'aspell_path' or 'spellchecker_lang' parameters, leading to the execution of arbitrary commands. This could result in unauthorized access to sensitive data, server compromise, or further exploitation of the system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.6.0031.6.003composer require egroupware/egroupware:1.6.003 -
>= 9.1, < 9.1.201003099.1.20100309composer require egroupware/egroupware:9.1.20100309 -
>= 9.2, < 9.2.201003099.2.20100309composer require egroupware/egroupware:9.2.20100309
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, you can restrict access to the 'spellchecker.php' file by modifying your web server configuration to deny access to this script until you can apply the patch.
Conclusion
The EGroupware code injection vulnerability (CVE-2010-3313) poses significant risks to users of affected versions. It is crucial to update to the latest patched versions to mitigate these risks and ensure the security of your application.
See every vulnerability recorded for egroupware/egroupware →
FAQ
The vulnerability is a code injection flaw that allows attackers to execute arbitrary commands on the server.
Affected versions include EGroupware 1.4.001+.002, 1.6.001+.002, and versions 9.1 and 9.2 before their respective patched releases.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Exploitation of this vulnerability can lead to unauthorized access, data breaches, and complete server compromise.
Yes, you can restrict access to the vulnerable script as a temporary measure until you can update to a secure version.
Related vulnerabilities
Recent vulnerabilities recorded for egroupware/egroupware.
