CVE-2015-4716 Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or exec...
HighCVSS 10.0
EPSS 24.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | <= 7.0.5 | No fix listed |
| owncloud server | = 8.0.0 | No fix listed |
| owncloud server | = 8.0.2 | No fix listed |
| owncloud server | = 8.0.3 | No fix listed |
| Microsoft windows | All versions | No fix listed |
References
- DSA-3373 vendor-advisory
- 76159 vdb-entry
- owncloud.org vendor-advisory