Description

The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."

Remediation

References

CVE-2015-7699

Related Vulnerabilities

WordPress Plugin W3 Total Cache Backdoor (0.9.2.2)

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18086)

Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2019-12855)

WordPress Plugin HDW WordPress Video Gallery Multiple Cross-Site Scripting Vulnerabilities (1.2)

WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.20.1)

Severity

Critical

Classification

CVE-2015-7699 CWE-20

Tags

Missing Update Known Vulnerabilities