PT-2014-6213
CVE-2014-4929
·
تاريخ النشر
2014-08-20
·
تاريخ التحديث
2014-08-21
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ownCloud Server versions prior to 5.0.17
ownCloud Server versions 6.0.x prior to 6.0.4
Description
A directory traversal issue exists in the routing component, allowing remote attackers to include and execute arbitrary local files by using a .. (dot dot) in a filename within the index.php file.
Recommendations
For ownCloud Server versions prior to 5.0.17, update to version 5.0.17 or later.
For ownCloud Server versions 6.0.x prior to 6.0.4, update to version 6.0.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾