CVE-2014-2044

CVE-2014-2044 describes an incomplete blacklist vulnerability in ownCloud versions prior to 5.0, specifically impacting Windows environments. This flaw allows authenticated attackers to bypass security restrictions and upload files with arbitrary names, including executable code, by leveraging Alternate Data Stream (ADS) syntax in the filename parameter. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.