Design/Logic Flaw

2021-02-1907:15:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.

CPENameOperatorVersion
owncloudge10.0.9
owncloudlt10.3.1

CPE	Name	Operator	Version
	owncloud	ge	10.0.9
	owncloud	lt	10.3.1

References

owncloud.com/security-advisories/access-to-all-file-versions/