medium6.0
CVE-2015-3013
ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files…
Impact
ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud Server | from 5.0.0 before 5.0.19 from 6.0.0 before 6.0.7 from 7.0.0 before 7.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2015/dsa-3244
- http://www.securityfocus.com/bid/74451
- https://owncloud.org/security/advisory/?id=oc-sa-2015-003
- https://owncloud.org/security/advisory/?id=oc-sa-2015-004
- http://www.debian.org/security/2015/dsa-3244
- http://www.securityfocus.com/bid/74451
- https://owncloud.org/security/advisory/?id=oc-sa-2015-003
- https://owncloud.org/security/advisory/?id=oc-sa-2015-004