Packagist/sabre/dav CVE-2013-1939: medium, EPSS 1.78%
SabreDAV Directory Traversal vulnerability
Action: Upgrade sabre/dav to 1.6.9 or later.
composer require sabre/dav:1.7.7composer require sabre/dav:1.8.5composer require sabre/dav:1.6.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.7 | - |
| 1.8.0 | 1.8.5 | - |
| 1.6.0 | 1.6.9 | - |
Fixed versions
| 1.7.7 | 1.8.5 | 1.6.9 |
Sources
- osv: GHSA-qg5v-jw6f-rpfj
- https://nvd.nist.gov/vuln/detail/CVE-2013-1939
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2013-1939.yaml
- https://github.com/sabre-io/dav
- https://groups.google.com/forum/?fromgroups=#!topic/sabredav-discuss/ehOUu7wTSGQ
- https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ
- http://owncloud.org/about/security/advisories/oC-SA-2013-016
CVE-2013-1939 · published · modified · JSON