CVE-2013-2085

MEDIUM 4.0CVE-2013-2085 · Published 14/03/2014 · updated 16/06/2026

In short

CVE-2013-2085 is a MEDIUM (CVSS 4.0) vulnerability affecting owncloud (owncloud).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.4% of all vulnerabilities.
Fix: update to 5.0.6 or later.

Package	Affected versions	Patched versions
owncloud owncloud	`< 5.0.6`	`5.0.6`

Description

Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the dir parameter.

References

owncloud.org/about/security/advisories/oC-SA-2013-020 · Patch

More vulnerabilities in owncloud

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free