CVE-2014-2053 in ownCloud

Summary

getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 02/19/2014
• Disclosure: 06/04/2014
• Moderation: VulDB entry created
• Entries: 1: VDB-69920
• CPE: ready
• CWE: CWE-611 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01970
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-2053
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-2053
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-2053/