High severityNVD Advisory· Published Jun 4, 2014· Updated Jun 17, 2026
CVE-2014-2055
CVE-2014-2055
Description
SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sabre/davPackagist | >= 1.6.0, < 1.7.11 | 1.7.11 |
sabre/davPackagist | >= 1.8.0, < 1.8.9 | 1.8.9 |
Affected products
50cpe:2.3:a:fruux:sabredav:*:*:*:*:*:*:*:*+ 30 more
- cpe:2.3:a:fruux:sabredav:*:*:*:*:*:*:*:*range: <=1.7.10
- cpe:2.3:a:fruux:sabredav:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.7:*:*:*:*:*:*:*
- cpe:2.3:a:fruux:sabredav:1.8.9:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:*:a:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:owncloud:owncloud_server:*:a:*:*:*:*:*:*range: <=5.0.14
- cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:5.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:6.0.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- owncloud.org/about/security/advisories/oC-SA-2014-006/nvdVendor Advisory
- github.com/advisories/GHSA-qm4x-ch5w-gr62ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-2055ghsaADVISORY
- github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2014-2055.yamlghsaWEB
- github.com/fruux/sabre-dav/releases/tag/1.7.11nvdWEB
- github.com/sabre-io/dav/commit/e3f46e0ecf83cf1d2ebf54908cde7b5ec170aa2cghsaWEB
- github.com/sabre-io/dav/issues/414ghsaWEB
News mentions
0No linked articles in our index yet.