Description
The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.
Remediation
References
Related Vulnerabilities
WordPress Plugin Login Widget With Shortcode Cross-Site Request Forgery (3.1.1)
MySQL Other Vulnerability (CVE-2010-3683)
MySQL CVE-2019-2528 Vulnerability (CVE-2019-2528)
WordPress Plugin WP Taxonomy Import Cross-Site Scripting (1.0.4)
WordPress Plugin Custom Website Data Cross-Site Scripting (2.2)