CVE-2016-1499 ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of servi...
HighCVSS 8.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | <= 8.0.9 | No fix listed |
| owncloud | = 8.2.0 | No fix listed |
| owncloud | = 8.2.1 | No fix listed |
| owncloud server | = 8.1.0 | No fix listed |
| owncloud server | = 8.1.1 | No fix listed |
| owncloud server | = 8.1.3 | No fix listed |
| owncloud server | = 8.1.4 | No fix listed |