SabreDAV Directory Traversal vulnerability
The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a `\` (backslash) character.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-1939US | medium5.0 | — | ||
The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators… | ||||
02
references
External citations — patches, advisories, analysis.
- http://owncloud.org/about/security/advisories/oC-SA-2013-016WEB
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2013-1939.yamlWEB
- https://github.com/sabre-io/davPACKAGE
- https://groups.google.com/forum/?fromgroups=#!topic/sabredav-discuss/ehOUu7wTSGQWEB
- https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQWEB
- https://nvd.nist.gov/vuln/detail/CVE-2013-1939ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan