SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
2014-06-04T14:55:04.047
2025-04-12T10:46:40.837
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | fruux | sabredav | ≤ 1.7.10 | Yes |
Application | fruux | sabredav | 1.6.0 | Yes |
Application | fruux | sabredav | 1.6.1 | Yes |
Application | fruux | sabredav | 1.6.2 | Yes |
Application | fruux | sabredav | 1.6.3 | Yes |
Application | fruux | sabredav | 1.6.4 | Yes |
Application | fruux | sabredav | 1.6.5 | Yes |
Application | fruux | sabredav | 1.6.6 | Yes |
Application | fruux | sabredav | 1.6.7 | Yes |
Application | fruux | sabredav | 1.6.8 | Yes |
Application | fruux | sabredav | 1.6.9 | Yes |
Application | fruux | sabredav | 1.6.10 | Yes |
Application | fruux | sabredav | 1.7.0 | Yes |
Application | fruux | sabredav | 1.7.1 | Yes |
Application | fruux | sabredav | 1.7.2 | Yes |
Application | fruux | sabredav | 1.7.3 | Yes |
Application | fruux | sabredav | 1.7.4 | Yes |
Application | fruux | sabredav | 1.7.5 | Yes |
Application | fruux | sabredav | 1.7.6 | Yes |
Application | fruux | sabredav | 1.7.7 | Yes |
Application | fruux | sabredav | 1.7.8 | Yes |
Application | fruux | sabredav | 1.7.9 | Yes |
Application | fruux | sabredav | 1.8.0 | Yes |
Application | fruux | sabredav | 1.8.1 | Yes |
Application | fruux | sabredav | 1.8.2 | Yes |
Application | fruux | sabredav | 1.8.3 | Yes |
Application | fruux | sabredav | 1.8.4 | Yes |
Application | fruux | sabredav | 1.8.5 | Yes |
Application | fruux | sabredav | 1.8.6 | Yes |
Application | fruux | sabredav | 1.8.7 | Yes |
Application | fruux | sabredav | 1.8.9 | Yes |
Application | owncloud | owncloud_server | 6.0.0 | Yes |
Application | owncloud | owncloud_server | 6.0.1 | Yes |
Application | fruux | sabredav | ≤ 1.7.10 | Yes |
Application | fruux | sabredav | 1.6.0 | Yes |
Application | fruux | sabredav | 1.6.1 | Yes |
Application | fruux | sabredav | 1.6.2 | Yes |
Application | fruux | sabredav | 1.6.3 | Yes |
Application | fruux | sabredav | 1.6.4 | Yes |
Application | fruux | sabredav | 1.6.5 | Yes |
Application | fruux | sabredav | 1.6.6 | Yes |
Application | fruux | sabredav | 1.6.7 | Yes |
Application | fruux | sabredav | 1.6.8 | Yes |
Application | fruux | sabredav | 1.6.9 | Yes |
Application | fruux | sabredav | 1.6.10 | Yes |
Application | fruux | sabredav | 1.7.0 | Yes |
Application | fruux | sabredav | 1.7.1 | Yes |
Application | fruux | sabredav | 1.7.2 | Yes |
Application | fruux | sabredav | 1.7.3 | Yes |
Application | fruux | sabredav | 1.7.4 | Yes |
Application | fruux | sabredav | 1.7.5 | Yes |
Application | fruux | sabredav | 1.7.6 | Yes |
Application | fruux | sabredav | 1.7.7 | Yes |
Application | fruux | sabredav | 1.7.8 | Yes |
Application | fruux | sabredav | 1.7.9 | Yes |
Application | fruux | sabredav | 1.8.0 | Yes |
Application | fruux | sabredav | 1.8.1 | Yes |
Application | fruux | sabredav | 1.8.2 | Yes |
Application | fruux | sabredav | 1.8.3 | Yes |
Application | fruux | sabredav | 1.8.4 | Yes |
Application | fruux | sabredav | 1.8.5 | Yes |
Application | fruux | sabredav | 1.8.6 | Yes |
Application | fruux | sabredav | 1.8.7 | Yes |
Application | fruux | sabredav | 1.8.9 | Yes |
Application | owncloud | owncloud_server | ≤ 5.0.14 | Yes |
Application | owncloud | owncloud_server | 5.0.0 | Yes |
Application | owncloud | owncloud_server | 5.0.1 | Yes |
Application | owncloud | owncloud_server | 5.0.2 | Yes |
Application | owncloud | owncloud_server | 5.0.3 | Yes |
Application | owncloud | owncloud_server | 5.0.4 | Yes |
Application | owncloud | owncloud_server | 5.0.5 | Yes |
Application | owncloud | owncloud_server | 5.0.6 | Yes |
Application | owncloud | owncloud_server | 5.0.7 | Yes |
Application | owncloud | owncloud_server | 5.0.8 | Yes |
Application | owncloud | owncloud_server | 5.0.9 | Yes |
Application | owncloud | owncloud_server | 5.0.10 | Yes |
Application | owncloud | owncloud_server | 5.0.11 | Yes |
Application | owncloud | owncloud_server | 5.0.12 | Yes |
Application | owncloud | owncloud_server | 5.0.13 | Yes |
Application | owncloud | owncloud_server | 5.0.14 | Yes |