lib/base.php in ownCloud prior to 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
owncloud owncloud 4.0.6 |
||
owncloud owncloud 4.0.4 |
||
owncloud owncloud 4.0.2 |
||
owncloud owncloud 4.0.1 |
||
owncloud owncloud 4.0.0 |
||
owncloud owncloud |
||
owncloud owncloud 4.0.5 |
||
owncloud owncloud 4.0.3 |