CVE-2015-7699

Published: Oct 26, 2015Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."

Affected (14)

Products: Owncloud: Owncloud Server

Owncloud

1 product

Owncloud Server

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Owncloud Owncloud Server	Version 7.0.0
Owncloud Owncloud Server	Version 7.0.1
Owncloud Owncloud Server	Version 7.0.2
Owncloud Owncloud Server	Version 7.0.3
Owncloud Owncloud Server	Version 7.0.4
Owncloud Owncloud Server	Version 7.0.5
Owncloud Owncloud Server	Version 7.0.6
Owncloud Owncloud Server	Version 7.0.7
Owncloud Owncloud Server	Version 8.0.0
Owncloud Owncloud Server	Version 8.0.2
Owncloud Owncloud Server	Version 8.0.3
Owncloud Owncloud Server	Version 8.0.4
Owncloud Owncloud Server	Version 8.0.5
Owncloud Owncloud Server	Version 8.1.0