CVE-2015-7699

EUVD-2015-7600
The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
owncloudowncloud_server
7.0.0
owncloudowncloud_server
7.0.1
owncloudowncloud_server
7.0.2
owncloudowncloud_server
7.0.3
owncloudowncloud_server
7.0.4
owncloudowncloud_server
7.0.5
owncloudowncloud_server
7.0.6
owncloudowncloud_server
7.0.7
owncloudowncloud_server
8.0.0
owncloudowncloud_server
8.0.2
owncloudowncloud_server
8.0.3
owncloudowncloud_server
8.0.4
owncloudowncloud_server
8.0.5
owncloudowncloud_server
8.1.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
owncloud
precise
not-affected
trusty
dne
vivid
dne
wily
dne
Common Weakness Enumeration
References
http://www.debian.org/security/2015/dsa-3373
https://github.com/owncloud/core/pull/18558
https://owncloud.org/security/advisory/?id=oc-sa-2015-018
http://www.debian.org/security/2015/dsa-3373
https://github.com/owncloud/core/pull/18558
https://owncloud.org/security/advisory/?id=oc-sa-2015-018