Vulnerabilites related to getid3 - getid3
Vulnerability from fkie_nvd
Published
2014-06-04 14:55
Modified
2024-11-21 02:05
Severity ?
Summary
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
References
cve@mitre.orghttp://getid3.sourceforge.net/source/changelog.txt
cve@mitre.orghttp://owncloud.org/about/security/advisories/oC-SA-2014-006/Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/58002
cve@mitre.orghttp://www.debian.org/security/2014/dsa-3001
cve@mitre.orghttps://wordpress.org/news/2014/08/wordpress-3-9-2/
af854a3a-2127-422b-91ae-364da2661108http://getid3.sourceforge.net/source/changelog.txt
af854a3a-2127-422b-91ae-364da2661108http://owncloud.org/about/security/advisories/oC-SA-2014-006/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/58002
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2014/dsa-3001
af854a3a-2127-422b-91ae-364da2661108https://wordpress.org/news/2014/08/wordpress-3-9-2/
Impacted products
Vendor Product Version
getid3 getid3 *
getid3 getid3 1.9.0
getid3 getid3 1.9.1
getid3 getid3 1.9.2
getid3 getid3 1.9.3
getid3 getid3 1.9.4
getid3 getid3 1.9.5
getid3 getid3 1.9.6
owncloud owncloud *
owncloud owncloud 5.0.0
owncloud owncloud 5.0.1
owncloud owncloud 5.0.2
owncloud owncloud 5.0.3
owncloud owncloud 5.0.4
owncloud owncloud 5.0.5
owncloud owncloud 5.0.6
owncloud owncloud 5.0.7
owncloud owncloud 5.0.8
owncloud owncloud 5.0.9
owncloud owncloud 5.0.10
owncloud owncloud 5.0.11
owncloud owncloud 5.0.12
owncloud owncloud 5.0.13
owncloud owncloud 5.0.14
getid3 getid3 *
getid3 getid3 1.9.0
getid3 getid3 1.9.1
getid3 getid3 1.9.2
getid3 getid3 1.9.3
getid3 getid3 1.9.4
getid3 getid3 1.9.5
getid3 getid3 1.9.6
owncloud owncloud 6.0.0
owncloud owncloud 6.0.1


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:getid3:getid3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CAE8C089-AD55-44B6-A339-A2C9704B553E",
              "versionEndIncluding": "1.9.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DD1A9EF-8E36-4DC2-B8C8-F53DF1E67021",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "082C4DC6-92ED-4F5C-A1C3-33ED05D35777",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4D9D3F2-6E2B-43AC-A110-8A2161CA3ABA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C1372B8-0C2F-4545-943D-21D8BF2A6246",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.4:b1:*:*:*:*:*:*",
              "matchCriteriaId": "6F4BE5F7-0CE4-4116-B069-3FD741E81428",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB5BCC7F-62B5-4C6F-B8C9-8E1AF03C8F8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CFFAC3A-8848-4E63-812B-F69D213748D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:*:a:*:*:*:*:*:*",
              "matchCriteriaId": "CF8A525D-F052-449B-AFD8-DC6A956D30D9",
              "versionEndIncluding": "5.0.14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF826F2B-83E1-4E64-A56C-B564028EBD6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "22A19441-2041-45DC-9F59-783C9B1FF9D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "43448288-B129-4210-9680-55836869F09F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "78639CDB-3763-4E71-B4F9-E51E5A261A16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DBE1CE3-7A8D-4C97-8066-F59C346A0494",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F97DF5D-DC0E-43FB-B0D2-4AA8C2A5413D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "55475558-53CA-4764-9A70-1355D5759CFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DC3BCEC-9685-4899-91B6-1889FAB235C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4055273-FBA3-46A7-9B0B-0A5A8BB2E0AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "56985A58-4F38-4192-AEC3-7953184206E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6510E0F-BA72-4591-8931-83974EFCDF0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "14E553AC-B7F1-4692-8BC7-C59CE39C5CD5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F1D79C4-2B24-4E55-8217-FDC00F22EC44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "16960810-E5B8-45EC-A54D-55941B1E728A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:5.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DF9CAFD-F2E5-4AD4-BB65-D04A87E8E3B5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:getid3:getid3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CAE8C089-AD55-44B6-A339-A2C9704B553E",
              "versionEndIncluding": "1.9.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DD1A9EF-8E36-4DC2-B8C8-F53DF1E67021",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "082C4DC6-92ED-4F5C-A1C3-33ED05D35777",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4D9D3F2-6E2B-43AC-A110-8A2161CA3ABA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C1372B8-0C2F-4545-943D-21D8BF2A6246",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.4:b1:*:*:*:*:*:*",
              "matchCriteriaId": "6F4BE5F7-0CE4-4116-B069-3FD741E81428",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB5BCC7F-62B5-4C6F-B8C9-8E1AF03C8F8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:1.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CFFAC3A-8848-4E63-812B-F69D213748D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:6.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A499C18-61F0-486C-99E5-F6DD74EE5521",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:owncloud:owncloud:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "237F18EA-1A9B-4DE6-B604-12EB651F5F0F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack."
    },
    {
      "lang": "es",
      "value": "getID3() anterior a 1.9.8, utilizado en ownCloud Server anterior a 5.0.15 y 6.0.x anterior a 6.0.2, permite a atacantes remotos leer archivos arbitrarios, causar una denegaci\u00f3n de servicio o posiblemente tener otro impacto a trav\u00e9s de un ataque de entidad externa XML (XXE)."
    }
  ],
  "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/611.html\n\n\"CWE-611: Improper Restriction of XML External Entity Reference (\u0027XXE\u0027)\"",
  "id": "CVE-2014-2053",
  "lastModified": "2024-11-21T02:05:32.803",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-06-04T14:55:03.840",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://getid3.sourceforge.net/source/changelog.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://owncloud.org/about/security/advisories/oC-SA-2014-006/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/58002"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2014/dsa-3001"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://wordpress.org/news/2014/08/wordpress-3-9-2/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://getid3.sourceforge.net/source/changelog.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://owncloud.org/about/security/advisories/oC-SA-2014-006/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/58002"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2014/dsa-3001"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://wordpress.org/news/2014/08/wordpress-3-9-2/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2021-10-01 16:15
Modified
2024-11-21 06:25
Severity ?
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.
References
cve@mitre.orghttps://github.com/JamesHeinrich/getID3Third Party Advisory
cve@mitre.orghttps://github.com/JamesHeinrich/getID3/issues/341Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/JamesHeinrich/getID3Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/JamesHeinrich/getID3/issues/341Exploit, Issue Tracking, Third Party Advisory
Impacted products
Vendor Product Version
getid3 getid3 *
getid3 getid3 2.0.0


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:getid3:getid3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F10EAFB-3494-44F7-A7EE-090491DA8973",
              "versionEndExcluding": "2.0.0",
              "versionStartIncluding": "1.9.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:getid3:getid3:2.0.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "EDAB2B93-1824-42EE-815D-D802E8D3CD10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo demos/demo.mysqli.php en getID3 versiones 1.X y v2.0.0-beta, permiten a atacantes remotos inyectar scripts web o HTML arbitrarios por medio del par\u00e1metro showtagfiles"
    }
  ],
  "id": "CVE-2021-40926",
  "lastModified": "2024-11-21T06:25:06.830",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-10-01T16:15:07.473",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/JamesHeinrich/getID3"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/JamesHeinrich/getID3/issues/341"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/JamesHeinrich/getID3"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/JamesHeinrich/getID3/issues/341"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

cve-2021-40926
Vulnerability from cvelistv5
Published
2021-10-01 15:42
Modified
2024-08-04 02:59
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.
References
https://github.com/JamesHeinrich/getID3/issues/341x_refsource_MISC
https://github.com/JamesHeinrich/getID3x_refsource_MISC
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:59:30.956Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/JamesHeinrich/getID3/issues/341"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/JamesHeinrich/getID3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-01T15:42:09",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/JamesHeinrich/getID3/issues/341"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/JamesHeinrich/getID3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-40926",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/JamesHeinrich/getID3/issues/341",
              "refsource": "MISC",
              "url": "https://github.com/JamesHeinrich/getID3/issues/341"
            },
            {
              "name": "https://github.com/JamesHeinrich/getID3",
              "refsource": "MISC",
              "url": "https://github.com/JamesHeinrich/getID3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-40926",
    "datePublished": "2021-10-01T15:42:09",
    "dateReserved": "2021-09-13T00:00:00",
    "dateUpdated": "2024-08-04T02:59:30.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-2053
Vulnerability from cvelistv5
Published
2014-06-04 14:00
Modified
2024-08-06 09:58
Severity ?
Summary
getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
References
http://www.debian.org/security/2014/dsa-3001vendor-advisory, x_refsource_DEBIAN
https://wordpress.org/news/2014/08/wordpress-3-9-2/x_refsource_CONFIRM
http://getid3.sourceforge.net/source/changelog.txtx_refsource_CONFIRM
http://secunia.com/advisories/58002third-party-advisory, x_refsource_SECUNIA
http://owncloud.org/about/security/advisories/oC-SA-2014-006/x_refsource_CONFIRM
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:58:16.348Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3001",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wordpress.org/news/2014/08/wordpress-3-9-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://getid3.sourceforge.net/source/changelog.txt"
          },
          {
            "name": "58002",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58002"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://owncloud.org/about/security/advisories/oC-SA-2014-006/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-04T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3001",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wordpress.org/news/2014/08/wordpress-3-9-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://getid3.sourceforge.net/source/changelog.txt"
        },
        {
          "name": "58002",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58002"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://owncloud.org/about/security/advisories/oC-SA-2014-006/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2053",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3001",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-3001"
            },
            {
              "name": "https://wordpress.org/news/2014/08/wordpress-3-9-2/",
              "refsource": "CONFIRM",
              "url": "https://wordpress.org/news/2014/08/wordpress-3-9-2/"
            },
            {
              "name": "http://getid3.sourceforge.net/source/changelog.txt",
              "refsource": "CONFIRM",
              "url": "http://getid3.sourceforge.net/source/changelog.txt"
            },
            {
              "name": "58002",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58002"
            },
            {
              "name": "http://owncloud.org/about/security/advisories/oC-SA-2014-006/",
              "refsource": "CONFIRM",
              "url": "http://owncloud.org/about/security/advisories/oC-SA-2014-006/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-2053",
    "datePublished": "2014-06-04T14:00:00",
    "dateReserved": "2014-02-19T00:00:00",
    "dateUpdated": "2024-08-06T09:58:16.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}