CVE-2021-35949

No fix known EPSS <1%

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

Published 2021-09-07 · CVE record · OSV

Products: owncloud