Citadel is a modestly represented open-source groupware and messaging platform whose vulnerability footprint concentrates in its web-facing components and SMTP service. The recurring weakness classes—primarily cross-site scripting, command injection, and authorization bypass flaws—reflect the input-handling and access-control demands of web and mail infrastructure, while public exploit code frequently emerges for disclosed issues. Live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Citadel over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-1192HIGH Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server | Jan 10, 2005 | 10.0 | 47 | NO | YES |
CVE-2008-0394HIGH Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserk | Jan 23, 2008 | 7.5 | 33 | NO | YES |
CVE-2002-0432HIGH Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar | Jul 26, 2002 | 10.0 | 32 | NO | NO |
CVE-2020-27739CRITICAL A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions. NOTE: this was reported | Oct 28, 2020 | 9.8 | 24 | NO | NO |
CVE-2004-1705MEDIUM Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username. | Jul 30, 2004 | 5.0 | 24 | NO | YES |
CVE-2007-3821HIGH Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified | Jul 17, 2007 | 7.5 | 22 | NO | NO |
CVE-2020-27742MEDIUM An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move templat | Oct 28, 2020 | 6.5 | 21 | NO | NO |
CVE-2020-29547MEDIUM An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cl | May 29, 2023 | 5.9 | 20 | NO | NO |
CVE-2020-27741MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters. N | Oct 28, 2020 | 6.1 | 20 | NO | NO |
CVE-2009-0364HIGH Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspeci | Mar 26, 2009 | 7.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Citadel.
Media articles that mention a CVE ID that affects a product developed by Citadel — matched by CVE ID, not by vendor name.