Volerion logoVolerion
Volerion logoVolerion

eGroupWare User Enumeration Vulnerability in Calendar Module

Vulnerability

A user enumeration vulnerability has been identified in eGroupWare version 17.1.20190111. This vulnerability resides in the calendar/freebusy.php file and allows unauthenticated remote attackers to enumerate users of web applications based on the server's response.

Impact

Exploitation of this vulnerability allows for user enumeration, which could be used as a preliminary step in a targeted attack, such as phishing or credential stuffing.

Added: Jul 11, 2025, 4:01 PM
Updated: Jul 11, 2025, 4:01 PM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
2.5
exploitability
7.4
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.