GHSA-qg5v-jw6f-rpfj

SabreDAV Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-1939

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	sabre/dav	>= 1.7.0, < 1.7.7	1.7.7
Packagist	sabre/dav	>= 1.8.0, < 1.8.5	1.8.5
Packagist	sabre/dav	>= 1.6.0, < 1.6.9	1.6.9

Details

As written in the advisory (Markdown source, shown as plain text).

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a `\` (backslash) character.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-1939 advisory
https://github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2013-1939.yaml web
https://github.com/sabre-io/dav package
https://groups.google.com/forum/?fromgroups=#!topic/sabredav-discuss/ehOUu7wTSGQ web
https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ web
http://owncloud.org/about/security/advisories/oC-SA-2013-016 web