CVE-2009-1773: Activecollab

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message.

Affected products

• Activecollab Activecollab: version 2.1.0 only

Published 2009-05-22. Last modified 2026-06-16.