CVE-2015-3013

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.34%

Published

May 8, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.

Weaknesses (CWE)

CWE-74

Affected Products (3)

owncloud · owncloud_server (up to 5.0.19)vulnerable

owncloud · owncloud_server (up to 6.0.7)vulnerable

owncloud · owncloud_server (up to 7.0.5)vulnerable

References (8)

http://www.debian.org/security/2015/dsa-3244

Vendor Advisory

http://www.securityfocus.com/bid/74451

Third Party AdvisoryVDB Entry

https://owncloud.org/security/advisory/?id=oc-sa-2015-003

PatchVendor Advisory

https://owncloud.org/security/advisory/?id=oc-sa-2015-004

PatchVendor Advisory

http://www.debian.org/security/2015/dsa-3244

Vendor Advisory

http://www.securityfocus.com/bid/74451

Third Party AdvisoryVDB Entry

https://owncloud.org/security/advisory/?id=oc-sa-2015-003

PatchVendor Advisory

https://owncloud.org/security/advisory/?id=oc-sa-2015-004

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs