CVE-2016-5876: Medium severity ownCloud ownCloud vulnerability
Published Jan 23, 2017
·Updated
ownCloud server before 8.2.6 and 9.x before 9.0.3, when the gallery app is enabled, allows remote attackers to download arbitrary images via a direct request.
Affected Software
4 affected components
ownCloud ownCloud<=8.2.5
ownCloud ownCloud=9.0.0
ownCloud ownCloud=9.0.1
ownCloud ownCloud=9.0.2
Remediation
Patch Available
Event History
Jan 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5876?
CVE-2016-5876 is considered to be of medium severity due to the potential for remote attackers to download arbitrary images.
2
How do I fix CVE-2016-5876?
To fix CVE-2016-5876, upgrade your ownCloud server to version 8.2.6 or higher, or to version 9.0.3 or higher.
3
Who is affected by CVE-2016-5876?
CVE-2016-5876 affects ownCloud server versions prior to 8.2.6 and 9.x prior to 9.0.3 when the gallery app is enabled.
4
What does CVE-2016-5876 allow an attacker to do?
CVE-2016-5876 allows remote attackers to exploit the vulnerability to download arbitrary images from the server.
5
Is there a workaround for CVE-2016-5876 if I cannot upgrade?
If you cannot upgrade to a fixed version for CVE-2016-5876, consider disabling the gallery app to mitigate the risk.