CVE-2014-2053

2014-06-0414:55:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2014-2053

id3

xml external entity

security vulnerability

owncloud server

9.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.7%

JSON

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

CPENameOperatorVersion
owncloud:owncloudowncloudeq5.0.11
owncloud:owncloudowncloudeq5.0.6
owncloud:owncloudowncloudeq5.0.2
owncloud:owncloudowncloudeq5.0.3
owncloud:owncloudowncloudeq5.0.9
getid3:getid3getid3eq1.9.0
getid3:getid3getid3eq1.9.5
owncloud:owncloudowncloudeq5.0.7
getid3:getid3getid3eq1.9.6
getid3:getid3getid3eq1.9.4

CPE	Name	Operator	Version
owncloud:owncloud	owncloud	eq	5.0.11
owncloud:owncloud	owncloud	eq	5.0.6
owncloud:owncloud	owncloud	eq	5.0.2
owncloud:owncloud	owncloud	eq	5.0.3
owncloud:owncloud	owncloud	eq	5.0.9
getid3:getid3	getid3	eq	1.9.0
getid3:getid3	getid3	eq	1.9.5
owncloud:owncloud	owncloud	eq	5.0.7
getid3:getid3	getid3	eq	1.9.6
getid3:getid3	getid3	eq	1.9.4