CVE-2020-10254

2021-02-1907:15:13

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.6%

JSON

An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.

CPENameOperatorVersion
coreeq10.0.8RC2
coreeq4.5.0RC1
coreeq4.0.3
coreeq2.0beta3
coreeq3.0RC1
coreeq10.0.2RC1
coreeq10.0.9RC2
coreeq10.0.9beta
coreeq10.0.9RC4
coreeq10.0.2

Name	Operator	Version
core	eq	10.0.8RC2
core	eq	4.5.0RC1
core	eq	4.0.3
core	eq	2.0beta3
core	eq	3.0RC1
core	eq	10.0.2RC1
core	eq	10.0.9RC2
core	eq	10.0.9beta
core	eq	10.0.9RC4
core	eq	10.0.2

Rows per page:

1-10 of 1231

References

blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44

owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/

owncloud.org/changelog/server/