CVE-2015-4715

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox…

published February 17, 2020

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01440 · 73.0th percentile
Published
2020-02-17T18:09Z
EPSS history
Timeline
  • 17 FEB 18:09Z
    The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox…
    cvelistv5