Lucene search

K
owncloudOwnCloudOC-SA-2014-015
HistoryMay 24, 2014 - 11:54 a.m.

Server: Enumeration of shared files in documents

2014-05-2411:54:29
owncloud.org
26

EPSS

0.001

Percentile

36.5%

Due to using the auto-incrementing file_id instead of the random generated token to access files in the documents app an authenticated users could enumerate shared files of other users.


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

EPSS

0.001

Percentile

36.5%