Description
Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5659)
WordPress Plugin jQuery Reply to Comment Cross-Site Request Forgery (1.31)
MySQL CVE-2024-21135 Vulnerability (CVE-2024-21135)
RubyGems Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-0899)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2246)