Description
SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-2641 Vulnerability (CVE-2015-2641)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5265)
SharePoint Missing Authorization Vulnerability (CVE-2026-55052)
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6472)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-1941)