Description

ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.

Remediation

References

CVE-2014-3835

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-10242)

Liferay Portal Missing Authorization Vulnerability (CVE-2022-38512)

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20417)

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37162)

PHP Other Vulnerability (CVE-2007-1825)

Severity

Medium

Classification

CVE-2014-3835 CWE-264

Tags

Missing Update Known Vulnerabilities