CVEvulnerability

CVE-2015-7699

9.0 HIGH Published 2015-10-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-10-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."

Affected configurations

• owncloud owncloud server 7.0.0 • owncloud owncloud server 7.0.1 • owncloud owncloud server 7.0.2 • owncloud owncloud server 7.0.3 • owncloud owncloud server 7.0.4 • owncloud owncloud server 7.0.5 • owncloud owncloud server 7.0.6 • owncloud owncloud server 7.0.7 • owncloud owncloud server 8.0.0 • owncloud owncloud server 8.0.2 • owncloud owncloud server 8.0.3 • owncloud owncloud server 8.0.4 • owncloud owncloud server 8.0.5 • owncloud owncloud server 8.1.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References