ownCloud 10 before version 10.15.3 contains a relative path traversal vulnerability (CWE-23) that can be exploited by an attacker with administrative privileges to execute arbitrary code on the system. This vulnerability affects file storage, synchronization, and sharing functionalities. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.0, reflecting network attack vector, high privileges required, no user interaction, and complete confidentiality, integrity, and availability impact. The vendor has released version 10.15.3 which patches this issue.

An attacker with administrative privileges can exploit the path traversal vulnerability to execute arbitrary code, potentially leading to full system compromise, data loss, or unauthorized data access. The vulnerability affects confidentiality, integrity, and availability of the affected system.

Upgrade ownCloud 10 to version 10.15.3 or later to apply the official patch that fixes this vulnerability. Since the vendor advisory confirms the fix in 10.15.3, applying this update is the recommended remediation.