Description

Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the dir parameter.

Remediation

References

CVE-2013-2085

Related Vulnerabilities

WordPress Plugin Schreikasten 'name' or 'contact' Field Cross-Site Scripting (0.14.13)

Python Untrusted Search Path Vulnerability (CVE-2023-41105)

ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0249)

Moodle Improper Input Validation Vulnerability (CVE-2022-35649)

WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.7.47)

Severity

Medium

Classification

CVE-2013-2085 CWE-22

Tags

Missing Update Known Vulnerabilities