CVE-2014-3835

ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.

Score

CVSS 2.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2014-06-04

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Owncloud (Owncloud)
• Owncloud Server (Owncloud)

References

• http://owncloud.org/about/security/advisories/oc-sa-2014-012/