CVE-2007-6383: Chandler Project Chandler Server

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated users to create arbitrary resources in another user's home collection.

Affected products

• Chandler Project Chandler Server: up to and including 0.10

Published 2007-12-15. Last modified 2026-06-16.