Description
Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the dir parameter.
Remediation
References
Related Vulnerabilities
Joomla! Core 3.x.x Information Disclosure (3.7.0 - 3.8.1)
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (3.2.6)
Internet Information Services Other Vulnerability (CVE-2000-1104)
ReviveAdserver Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-22948)
Dolphin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3167)