CVE-2014-4929

Published: Aug 20, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.

Affected (22)

Products: Owncloud: Owncloud Server, Owncloud

Owncloud

2 products

Owncloud Server

Owncloud

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Owncloud Owncloud Server	Version 6.0.0
Owncloud Owncloud Server	Version 6.0.1
Owncloud Owncloud Server	Version 6.0.2
Owncloud Owncloud Server	Version 6.0.3

Configuration B

18 vulnerable

Vulnerable Software	Affected Versions
Owncloud Owncloud	Up to 5.0.16
Owncloud Owncloud Server	Version 5.0.0
Owncloud Owncloud Server	Version 5.0.10
Owncloud Owncloud Server	Version 5.0.11
Owncloud Owncloud Server	Version 5.0.12
Owncloud Owncloud Server	Version 5.0.13
Owncloud Owncloud Server	Version 5.0.14
Owncloud Owncloud Server	Version 5.0.14 a
Owncloud Owncloud Server	Version 5.0.15
Owncloud Owncloud Server	Version 5.0.1
Owncloud Owncloud Server	Version 5.0.2
Owncloud Owncloud Server	Version 5.0.3
Owncloud Owncloud Server	Version 5.0.4
Owncloud Owncloud Server	Version 5.0.5
Owncloud Owncloud Server	Version 5.0.6
Owncloud Owncloud Server	Version 5.0.7
Owncloud Owncloud Server	Version 5.0.8
Owncloud Owncloud Server	Version 5.0.9