Description
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.
Remediation
References
Related Vulnerabilities
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)
WordPress Plugin TablePress XML External Entity Injection (1.8)
WordPress Plugin VikRentCar Car Rental Management System Cross-Site Request Forgery (1.1.6)
WordPress Plugin WP Custom Fields Search Cross-Site Scripting (1.2.34)