Lucene search

K
owncloudOwnCloudOC-SA-2013-020
HistoryMay 14, 2013 - 11:42 a.m.

Server: Multiple directory traversals

2013-05-1411:42:22
owncloud.org
26

0.001 Low

EPSS

Percentile

49.7%

Multiple directory traversal vulnerabilities in (1) apps/files_trashbin/index.php via the “dir” GET parameter and (2) lib/files/view.php via undefined vectors in all ownCloud versions prior to 5.0.6 and other versions before 4.0.15, allow authenticated remote attackers to get access to arbitrary local files.


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

0.001 Low

EPSS

Percentile

49.7%