VULNERABILITY INTELLIGENCE

CVE-2014-2585

CVSS score4.9 MEDIUM
EPSS probability1.29%
CISA KEVNot currently listed
Published2014-03-24
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:N

Description

ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references