Description
The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.
Remediation
References
Related Vulnerabilities
MySQL Other Vulnerability (CVE-2002-1923)
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-10959)
Drupal Core 8.7.0 Directory Traversal (8.7.0)
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0825)
Squid Improper Encoding or Escaping of Output Vulnerability (CVE-2021-31806)