CVE-2015-4717

The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_GET parameters cast…

published October 21, 2015

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_GET parameters cast by PHP to an array, which allows remote attackers to cause a denial of service (infinite loop and log file consumption) via crafted endpoint file names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02832 · 86.5th percentile
Published
2015-10-21T18:00Z
EPSS history
Timeline
  • 21 OCT 18:00Z
    The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_GET parameters cast…
    cvelistv5