CVE-2016-1499

PoC —

CVSS 3.0

8.5 high

EPSS

3%p88

Published

Jan 8, 2016 (Jan 8, 2016)

Modified

Jun 17, 2026

Description

ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.

Vendors: owncloud
Products: owncloud, owncloud server
Weakness: CWE-200, CWE-399
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news0 stories

No ingested article mentions this CVE yet.