Lucene search

K
cvelistRedhatCVELIST:CVE-2013-1939
HistoryMar 14, 2014 - 4:00 p.m.

CVE-2013-1939

2014-03-1416:00:00
redhat
www.cve.org
6

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

55.5%

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

55.5%