| Package | Affected versions | Patched versions |
|---|---|---|
| james-heinrich/getid3 | < 1.9.9 | 1.9.9 |
| getid3 | = 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4= 1.9.5= 1.9.6≤ 1.9.7 | |
| owncloud server | = 5.0.0= 5.0.1= 5.0.10= 5.0.11= 5.0.12= 5.0.13= 5.0.14= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 6.0.0= 6.0.1≤ 5.0.14 |
getID3() before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free