Description

ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.

Remediation

References

CVE-2015-3013

Related Vulnerabilities

osTicket Other Vulnerability (CVE-2006-5407)

Envoy Proxy Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-11767)

Jboss EAP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-14900)

WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)

WordPress Plugin Bookly #1 WordPress Booking Plugin (Lite Version) Cross-Site Scripting (14.4)

Severity

Medium

Classification

CVE-2015-3013 CWE-138

Tags

Missing Update Known Vulnerabilities