CVE-2015-7699: Input Validation
The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7699?
CVE-2015-7699 has been classified as a potential high severity vulnerability due to the possibility of remote code execution.
How do I fix CVE-2015-7699?
To mitigate CVE-2015-7699, update ownCloud Server to version 7.0.9, 8.0.7, or 8.1.2 or later.
What versions of ownCloud are affected by CVE-2015-7699?
CVE-2015-7699 affects ownCloud Server versions prior to 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2.
What type of attack does CVE-2015-7699 enable?
CVE-2015-7699 enables remote authenticated users to instantiate arbitrary classes, which could lead to code execution.
Who is impacted by CVE-2015-7699?
Remote authenticated users of ownCloud Server versions affected by CVE-2015-7699 are at risk of exploitation.