Security Advisory

CVE-2019-11356

9.8
CRITICAL

Vulnerability Description

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.
Published Date June 3, 2019
Official Source NIST NVD Advisory