Path Traversal in Owncloud

CVE-2013-2085

Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the dir parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.

Affected products

Owncloud
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)