Security Advisory

CVE-2015-6500

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-10-26 14:00:00
Last updated 2024-08-06 07:22:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.