CVE-2013-2089

2014-03-1416:55:05

[email protected]

web.nvd.nist.gov

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.002

Percentile

56.3%

JSON

Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted file, then accessing it via a direct request to the file in /data.

Affected configurations

Nvd

Node

owncloudowncloudRange≤5.0.5

owncloudowncloudMatch5.0.0

owncloudowncloudMatch5.0.1

owncloudowncloudMatch5.0.2

owncloudowncloudMatch5.0.3

owncloudowncloudMatch5.0.4

VendorProductVersionCPE
owncloudowncloud*cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
owncloudowncloud5.0.0cpe:2.3:a:owncloud:owncloud:5.0.0:*:*:*:*:*:*:*
owncloudowncloud5.0.1cpe:2.3:a:owncloud:owncloud:5.0.1:*:*:*:*:*:*:*
owncloudowncloud5.0.2cpe:2.3:a:owncloud:owncloud:5.0.2:*:*:*:*:*:*:*
owncloudowncloud5.0.3cpe:2.3:a:owncloud:owncloud:5.0.3:*:*:*:*:*:*:*
owncloudowncloud5.0.4cpe:2.3:a:owncloud:owncloud:5.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
owncloud	owncloud	*	cpe:2.3:a:owncloud:owncloud::::::::
owncloud	owncloud	5.0.0	cpe:2.3:a:owncloud:owncloud:5.0.0:::::::*
owncloud	owncloud	5.0.1	cpe:2.3:a:owncloud:owncloud:5.0.1:::::::*
owncloud	owncloud	5.0.2	cpe:2.3:a:owncloud:owncloud:5.0.2:::::::*
owncloud	owncloud	5.0.3	cpe:2.3:a:owncloud:owncloud:5.0.3:::::::*
owncloud	owncloud	5.0.4	cpe:2.3:a:owncloud:owncloud:5.0.4:::::::*