Description

The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."

Remediation

References

CVE-2015-7699

Related Vulnerabilities

WordPress Plugin Wow Forms-create any form with custom style SQL Injection (2.1)

XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32731)

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.11.2)

Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1614)

WordPress Plugin Insert Html Snippet Cross-Site Request Forgery (1.2)

Severity

Critical

Classification

CVE-2015-7699 CWE-20

Tags

Missing Update Known Vulnerabilities