Description

Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.

Remediation

References

CVE-2014-4929

Related Vulnerabilities

CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2090)

Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-29436)

WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896)

MySQL CVE-2019-2624 Vulnerability (CVE-2019-2624)

WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility includes Backdoor [Only if downloaded via the vendor website] (1.0.4)

Severity

Medium

Classification

CVE-2014-4929 CWE-22

Tags

Missing Update Known Vulnerabilities