CVE-2014-3837: The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id, which allows remote authenticated users to enumerate shared…

PriorityP417medium4CVSS 2.0

AVNACLAuSCNIPAN

EPSS

0.91%

55.6th percentile

The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id, which allows remote authenticated users to enumerate shared files via unspecified vectors.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
owncloud	owncloud	<= 6.0.2	—
owncloud	owncloud_server	—	—
owncloud	owncloud_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.