CVE-2020-16144

2021-02-0918:15:18

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud.

CPENameOperatorVersion
files_antiviruseq0.15.1RC1
files_antiviruseq0.13.0
files_antiviruseq8.2RC2
files_antiviruseq9.1.0RC1
files_antiviruseq10.0.0beta2
files_antiviruseq0.14.0RC1
files_antiviruseq10.0.2RC1
files_antiviruseq9.0.0RC1
files_antiviruseq10.0.0RC3
files_antiviruseq10.0.1RC5

Name	Operator	Version
files_antivirus	eq	0.15.1RC1
files_antivirus	eq	0.13.0
files_antivirus	eq	8.2RC2
files_antivirus	eq	9.1.0RC1
files_antivirus	eq	10.0.0beta2
files_antivirus	eq	0.14.0RC1
files_antivirus	eq	10.0.2RC1
files_antivirus	eq	9.0.0RC1
files_antivirus	eq	10.0.0RC3
files_antivirus	eq	10.0.1RC5