HexBrain

ownCloud · Report #83801

apps.owncloud.com: Path Disclosure

Validstatus
2upvotes
11 Sept 2015disclosed

How it was found

Threat: A potentially sensitive file, directory, or directory listing was discovered on the Web server.

Impact: The contents of this file or directory may disclose sensitive information.

Solution: Verify that access to this file or directory is permitted. If necessary, remove it or apply access controls to it.

URL: https://apps.owncloud.com/CONTENT/user-pics/0/.svn/entries

Extracted Info:

  1. committed-date="2006-06-26T14:30:45.256007Z"
  2. url="file:///var/svn/repos/kde-look/trunk/usermanager/pics/0"
  3. last-author="root"
  4. kind="dir"
  5. uuid="02c33d69-2117-0410-82eb-df9ca47e2d51"
  6. repos="file:///var/svn/repos/kde-look"

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original