Information disclosure in Owncloud
CVE-2014-9046
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Vulnerability class: Information Disclosure
EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.
Affected products
- Owncloud
- Owncloud Owncloud_server — versions 5.0.0, 5.0.1, 5.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)