Description

ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages.

Remediation

References

CVE-2016-1501

Related Vulnerabilities

WordPress Plugin Theme Demo Import Arbitrary File Upload (1.1.0)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17450)

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7864)

Atlassian Jira CVE-2020-29451 Vulnerability (CVE-2020-29451)

Internet Information Services Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1582)

Severity

Medium

Classification

CVE-2016-1501 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities