Design/Logic Flaw

2015-02-0418:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.6%

JSON

The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.

CPENameOperatorVersion
owncloudeq5.0.11
owncloudeq5.0.6
owncloudeq5.0.2
owncloudeq7.0.1
owncloudeq6.0.5
owncloudeq6.0.2
owncloudeq7.0.2
owncloudeq5.0.3
owncloudeq5.0.9
owncloudeq5.0.7

Name	Operator	Version
owncloud	eq	5.0.11
owncloud	eq	5.0.6
owncloud	eq	5.0.2
owncloud	eq	7.0.1
owncloud	eq	6.0.5
owncloud	eq	6.0.2
owncloud	eq	7.0.2
owncloud	eq	5.0.3
owncloud	eq	5.0.9
owncloud	eq	5.0.7