CVE-2015-7699 The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary cod...
HighCVSS 9.0
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud server | = 7.0.0 | No fix listed |
| owncloud server | = 7.0.1 | No fix listed |
| owncloud server | = 7.0.2 | No fix listed |
| owncloud server | = 7.0.3 | No fix listed |
| owncloud server | = 7.0.4 | No fix listed |
| owncloud server | = 7.0.5 | No fix listed |
| owncloud server | = 7.0.6 | No fix listed |
| owncloud server | = 7.0.7 | No fix listed |
| owncloud server | = 8.0.0 | No fix listed |
| owncloud server | = 8.0.2 | No fix listed |
| owncloud server | = 8.0.3 | No fix listed |
| owncloud server | = 8.0.4 | No fix listed |
| owncloud server | = 8.0.5 | No fix listed |
| owncloud server | = 8.1.0 | No fix listed |
References
- DSA-3373 vendor-advisory
- github.com
- owncloud.org vendor-advisory