Skip to content

Vendor

fruux vulnerabilities

2 published CVES affecting fruux, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of fruux alerts

Products

Latest fruux CVEs

Newest publication first

  1. CVE-2014-2055 XXE in SabreDAV

    Published
    HighCVSS 7.5 EPSS 2.2% PoC

    SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

  2. CVE-2013-1939 SabreDAV Directory Traversal vulnerability

    Published
    MediumCVSS 5.0 EPSS 1.8% PoC

    The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) characte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.