VULNERABILITY INTELLIGENCE

CVE-2014-3835

CVSS score5.5 MEDIUM
EPSS probability1.04%
CISA KEVNot currently listed
Published2014-06-04
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:P

Description

ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.

Primary references