fruux SabreDAV 1.7.6

CPE Details

fruux SabreDAV 1.7.6
1.7.6
2014-03-17 13:51 +00:00
2014-03-17 14:05 +00:00

Alerte pour un CPE

Stay informed of any changes for a specific CPE.
Alert management

CPE Name: cpe:2.3:a:fruux:sabredav:1.7.6:*:*:*:*:*:*:*

Informations

Vendor

fruux

Product

sabredav

Version

1.7.6

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2014-2055 2014-06-04 12:00 +00:00 SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
7.5
CVE-2013-1939 2014-03-14 15:00 +00:00 The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.
5
Click on the button to the left (OFF), to authorize the inscription of cookie improving the functionalities of the site. Click on the button to the left (Accept all), to unauthorize the inscription of cookie improving the functionalities of the site.