CVE-2014-4929

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.17 ownCloud Server versions 6.0.x prior to 6.0.4

Description A directory traversal issue exists in the routing component, allowing remote attackers to include and execute arbitrary local files by using a .. (dot dot) in a filename within the index.php file.

Recommendations For ownCloud Server versions prior to 5.0.17, update to version 5.0.17 or later. For ownCloud Server versions 6.0.x prior to 6.0.4, update to version 6.0.4 or later.