CVSS 3.0
8.8 highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2017-15914
High (8.8) in borgbackup borg. EPSS 1.9% chance of exploitation in the next 30 days. Fixed in borgbackup 1.1.3.
Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.
Severity
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- borgbackup:borg
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8q8v-28rm-qw4w | PyPI | borgbackup | >=1.1.0b1 <1.1.3 | 1.1.3 |
| PYSEC-2018-105 | PyPI | borgbackup | >=1.1.0b1 <1.1.3 | 1.1.3 |