Description

Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors.

Remediation

References

CVE-2013-2039

Related Vulnerabilities

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3260)

Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)

Oracle Application Server CVE-2006-3706 Vulnerability (CVE-2006-3706)

WordPress Cross-Site Scripting Vulnerability (3.9.3 - 4.2)

WordPress Plugin WordPress Alipay/Tenpay/PayPal SQL Injection (3.7.2)

Severity

Medium

Classification

CVE-2013-2039 CWE-22

Tags

Missing Update Known Vulnerabilities