Description

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the user_migrate application is enabled, allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors.

Remediation

References

CVE-2013-1851

Related Vulnerabilities

WordPress Plugin Visitor Traffic Real Time Statistics Security Bypass (2.11)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8115)

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)

Jetty Observable Discrepancy Vulnerability (CVE-2017-9735)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2019-10079)

Severity

Low

Classification

CVE-2013-1851

Tags

Missing Update Known Vulnerabilities