CVE-2015-4716

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2015-10-21

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Windows (Microsoft)
• Owncloud (Owncloud)
• Owncloud Server (Owncloud)

References

• http://www.debian.org/security/2015/dsa-3373
• http://www.securityfocus.com/bid/76159
• https://owncloud.org/security/advisory/?id=oc-sa-2015-006