CVE-2014-2055

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

• fruux sabredav (<= 1.7.10) • fruux sabredav 1.6.0 • fruux sabredav 1.6.1 • fruux sabredav 1.6.2 • fruux sabredav 1.6.3 • fruux sabredav 1.6.4 • fruux sabredav 1.6.5 • fruux sabredav 1.6.6 • fruux sabredav 1.6.7 • fruux sabredav 1.6.8 • fruux sabredav 1.6.9 • fruux sabredav 1.6.10 • fruux sabredav 1.7.0 • fruux sabredav 1.7.1 • fruux sabredav 1.7.2 • fruux sabredav 1.7.3 • fruux sabredav 1.7.4 • fruux sabredav 1.7.5 • fruux sabredav 1.7.6 • fruux sabredav 1.7.7 • fruux sabredav 1.7.8 • fruux sabredav 1.7.9 • fruux sabredav 1.8.0 • fruux sabredav 1.8.1 • fruux sabredav 1.8.2 • fruux sabredav 1.8.3 • fruux sabredav 1.8.4 • fruux sabredav 1.8.5 • fruux sabredav 1.8.6 • fruux sabredav 1.8.7 • fruux sabredav 1.8.9 • owncloud owncloud server 6.0.0 • owncloud owncloud server 6.0.1 • owncloud owncloud server (<= 5.0.14) • owncloud owncloud server 5.0.0 • owncloud owncloud server 5.0.1 • owncloud owncloud server 5.0.2 • owncloud owncloud server 5.0.3 • owncloud owncloud server 5.0.4 • owncloud owncloud server 5.0.5 • owncloud owncloud server 5.0.6 • owncloud owncloud server 5.0.7 • owncloud owncloud server 5.0.8 • owncloud owncloud server 5.0.9 • owncloud owncloud server 5.0.10 • owncloud owncloud server 5.0.11 • owncloud owncloud server 5.0.12 • owncloud owncloud server 5.0.13 • owncloud owncloud server 5.0.14