PT-2025-29231 · Unknown · Egroupware

Published 2025-07-11 · Updated 2025-07-11 · CVE-2023-38327

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: eGroupWare version 17.1.20190111

Description: A user enumeration issue exists in eGroupWare. An unauthenticated remote attacker can enumerate users of web applications based on server response via the /calendar/freebusy.php API endpoint.

Recommendations: Update to a newer version of eGroupWare. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2023-38327

Affected Products

Egroupware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-38327 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38327 · Vendor Advisory
• https://twitter.com/CVEnew/status/1943700220321099928 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1943740502278385883 · Twitter Post
• https://gruppotim.it/it/footer/red-team.html · Note