Description
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Salesforce Integration Cross-Site Scripting (1.5.8)
Squid Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-18677)
WordPress Plugin Get Recent Comments Cross-Site Scripting (2.0.6)
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)
Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-10133)