critical9.0
CVE-2015-7699
The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary c…
Impact
The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud Server | Versions 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2015/dsa-3373
- https://github.com/owncloud/core/pull/18558
- https://owncloud.org/security/advisory/?id=oc-sa-2015-018
- http://www.debian.org/security/2015/dsa-3373
- https://github.com/owncloud/core/pull/18558
- https://owncloud.org/security/advisory/?id=oc-sa-2015-018