CVE-2014-2056: High severity ownCloud ownCloud vulnerability
PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2056?
CVE-2014-2056 is classified as a moderate severity vulnerability allowing remote attackers to exploit XML External Entity attacks.
How do I fix CVE-2014-2056?
To fix CVE-2014-2056, upgrade ownCloud Server to versions 5.0.15 or 6.0.2 and above.
What impact could CVE-2014-2056 have on my system?
CVE-2014-2056 could allow attackers to read arbitrary files and potentially cause a denial of service on the affected system.
Which versions of ownCloud are affected by CVE-2014-2056?
CVE-2014-2056 affects ownCloud Server versions prior to 5.0.15 and 6.0.x before 6.0.2.
What types of attacks are possible with CVE-2014-2056?
CVE-2014-2056 may enable remote attackers to perform file reading, denial of service attacks, or exploit other vulnerabilities via an XML External Entity injection.