CVE-2013-1939

The CVE-2013-1939 issue affects SabreDAV’s HTML/Browser plugin used in ownCloud on Windows, where improper checking of path separators in the base path allows remote attackers to read arbitrary files via a backslash character. Concrete details in connected documents show that SabreDAV versions 1....

CVE-2014-2055

SabreDAV vulnerability (CVE-2014-2055) affects SabreDAV <= 1.7.10 used within ownCloud Server <= 6.0.x (before 6.0.2) and = 5.0.15 or >= 6.0.2) where fixes are implemented. If exploitation details are not provided in the documents, they are not assumed; only the explicit XXE risk and aff...