Description

The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."

Remediation

References

CVE-2015-7699

Related Vulnerabilities

Magento Improper Authorization Vulnerability (CVE-2021-21026)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-3164)

WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.7.0)

MySQL CVE-2019-2966 Vulnerability (CVE-2019-2966)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12708)

Severity

Critical

Classification

CVE-2015-7699 CWE-20

Tags

Missing Update Known Vulnerabilities