CVE-2015-3013 | BDVDB-2026-69291 Detail

Description#

ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://owncloud.org/security/advisory/?id=oc-sa-2015-003
http://www.securityfocus.com/bid/74451
https://owncloud.org/security/advisory/?id=oc-sa-2015-004
http://www.debian.org/security/2015/dsa-3244

Exploit#

No public exploit known

History#

Version 12015-05-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.