What is CVE-2014-2056?

CVE-2014-2056 is a vulnerability in Owncloud Server. Published 2014-06-04.

Is CVE-2014-2056 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Owncloud Server

CVE-2014-2056

PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.

Affected products

Owncloud Owncloud_server — versions 5.0.0, 5.0.1, 5.0.2
Phpdocx
N/a — versions n/a

Public proof-of-concept exploits

rockmelodies/iiirockyiiidocx

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2014-2056?: CVE-2014-2056 is a vulnerability in Owncloud Server. Published 2014-06-04.
Is CVE-2014-2056 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.