VULNERABILITY INTELLIGENCE

CVE-2012-5610

CVSS score6.5 MEDIUM
EPSS probability2.17%
CISA KEVNot currently listed
Published2012-12-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a special crafted name.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references