Sabredav

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fruux:sabredav:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFruux (fb4e8cac-ae9f-5ff4-9a11-98999588629a)
ProductSabredav (a9c353a1-66d7-5f18-871d-ddd80e272545)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/php-sabredav purl2cpe 2026-06-01 10:17:43.823427
pkg:deb/ubuntu/php-sabredav purl2cpe 2026-06-01 10:17:43.823430
pkg:github/fruux/sabre-dav purl2cpe 2026-06-01 10:17:43.823433
pkg:github/sabre-io/dav purl2cpe 2026-06-01 10:17:43.823436
pkg:rpm/fedora/php-sabre-dav purl2cpe 2026-06-01 10:17:43.823439

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2055 vulnerable 2026-06-08 05:05:27.459722 Details available
SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Published: 2014-06-04T14:00:00.000Z
Updated: 2024-08-06T09:58:16.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1939 vulnerable 2026-06-08 05:03:57.359610 Details available
The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T15:20:37.259Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.