CVE-2013-2039

ownCloud < 4.0.15, 4.5.x < 4.5.11, 5.x < 5.0.6 - Authenticated Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://owncloud.org/about/security/advisories/oC-SA-2013-020/

Scores

EPSS 0.0012
EPSS Percentile 30.0%

Details

CWE
CWE-22
Status published
Products (31)
owncloud/owncloud < 4.0.14
owncloud/owncloud_server 4.0.0
owncloud/owncloud_server 4.0.1
owncloud/owncloud_server 4.0.2
owncloud/owncloud_server 4.0.3
owncloud/owncloud_server 4.0.4
owncloud/owncloud_server 4.0.5
owncloud/owncloud_server 4.0.6
owncloud/owncloud_server 4.0.7
owncloud/owncloud_server 4.0.8
... and 21 more
Published Mar 14, 2014
Tracked Since Feb 18, 2026