Medium severity · published Feb 17, 2020
CVE-2015-4715
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been…
4.9
CVSS
1.4%
EPSS
No
On KEV
Description
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OW
Owncloud · Owncloud
before 6.0.8 · source: NVD
OS
Owncloud Server · Owncloud
7.0.0 before 7.0.6; 8.0.0 before 8.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4715
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4715
Third Party Advisory
http://www.securityfocus.com/bid/76158
Patch
https://github.com/owncloud/core/commit/bf0f1a50926a75a26a42a3da4d62e84a489ee77a
Vendor Advisory
https://owncloud.org/security/advisories/mounted-dropbox-storage-allows-dropbox-com-access-file/
Vendor Advisory
https://owncloud.org/security/advisory/?id=oc-sa-2015-005
More from Owncloud
9.8
CVE-2023-49105
ownCloud Improper Authentication Vulnerability
9.8
CVE-2019-25337
OwnCloud 8.1.8 - Username Disclosure
9.8
CVE-2021-35946
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions
9.8
CVE-2014-2052
Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other…
9.8
CVE-2014-2048
The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation