CVE-2023-38327: Egroupware

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists under calendar/freebusy.php, which allows unauthenticated remote attackers to enumerate the users of web applications based on server response.

Affected products

Published 2025-07-11. Last modified 2026-06-17.