{"id":"CVE-2015-6500","aliases":["DSA-3373-1","EUVD-2015-6440","GHSA-pmhq-22rw-g7qj","MGASA-2015-0378"],"status":"published","title":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows...","description":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02627,"percentile":0.85599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-399"],"published":"2015-09-18T15:57:28Z","modified":"2026-06-17T00:30:58Z","affected":[{"source":"osv","ecosystem":"Debian:8","package":"owncloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.4+dfsg-4~deb8u3"}]}],"versions":["7.0.4+dfsg-2","7.0.4+dfsg-3","7.0.4+dfsg-4~deb8u1","7.0.4+dfsg-4~deb8u2"],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"owncloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.8-1.mga5"}]}],"bundled":2}],"products":[{"vendor":"owncloud","product":"owncloud_server"}],"references":[{"url":"https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-048.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.debian.org/security/2015/dsa-3373","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2015-014","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6500"},{"url":"https://github.com/advisories/GHSA-pmhq-22rw-g7qj"},{"url":"https://advisories.mageia.org/MGASA-2015-0378.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16771","tags":["report"]},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2015-015","tags":["advisory"]},{"url":"https://owncloud.org/changelog/","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-6500","description":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.","status":"published","published":"2015-10-26T14:00:00Z","modified":"2024-08-06T07:22:22.224Z","updated_at":"2026-11-02T14:35:42.680858Z"}],"euvd":[{"id":"EUVD-2015-6440","description":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.","status":"published","published":"2015-10-26T14:00:00Z","modified":"2024-08-06T07:22:22Z","updated_at":"2026-11-03T02:21:55.706543Z"}],"ghsa":[{"id":"GHSA-pmhq-22rw-g7qj","title":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows...","description":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.","status":"published","published":"2022-05-17T00:28:14Z","modified":"2023-02-03T05:01:47Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:53:02.192117Z"}],"nvd":[{"id":"CVE-2015-6500","description":"Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php.","status":"published","published":"2015-10-26T14:59:08.297Z","modified":"2026-06-17T00:30:58.273Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-22","CWE-399"],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"DSA-3373-1","title":"owncloud - security update","status":"published","published":"2015-10-18T00:00:00Z","modified":"2026-03-09T01:18:40.736999Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0378","title":"Updated owncloud packages fix security vulnerabilities","description":"Updated owncloud package fixes security vulnerabilities:\n\nIn ownCloud before 8.0.6, due to an incorrect usage of an ownCloud internal\nfile system function the passed path to the file scanner was resolved\nrelatively. An authenticated adversary may thus be able to get a listing of\ndirectories (but not the containing files) existing on the filesystem.\nHowever, it is not possible to access any of these files (CVE-2015-6500).\n\nIn ownCloud before 8.0.6, due to not properly checking the ownership of an\ncalendar, an authenticated attacker is able to download calendars of other\nusers via the \"calid\" GET parameter to export.php in /apps/calendar/\n(CVE-2015-6670).\n\nThe owncloud package has been updated to version 8.0.8, which fixes these\nissues, as well as other bugs and other not-yet-disclosed security issues.\n","status":"published","published":"2015-09-18T15:57:28Z","modified":"2026-04-16T06:26:27.805050615Z","updated_at":"2026-11-02T15:49:39.792687Z"}]}}