ownCloud CVE-2014-4929 Local File Include Vulnerability

ownCloud is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts. This could allow the attacker to compromise the application and the computer; other attacks are also possible.

Versions prior to ownCloud 6.0.4 and 5.0.17 are vulnerable.


 

Privacy Statement
Copyright 2010, SecurityFocus