CVE-2020-36252

ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number...

CVE-2020-10252

CVE-2020-10252 affects ownCloud prior to 10.4. The issue is an SSRF flaw triggered via the apps/files_sharing/external remote parameter, allowing an authenticated attacker to interact with local services blind(ly) or perform a Denial of Service. The description does not provide explicit exploit d...

CVE-2020-10252

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

CVE-2020-10254

CVE-2020-10254 affects ownCloud prior to 10.4, where an attacker can bypass authentication by leveraging the preview of a password-protected image. The vulnerability relates to access control on image previews, potentially allowing unauthorized users to view protected content. The issue is docume...

CVE-2020-10254

An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...

Owncloud File Firewall 安全漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A security vulnerability exists in OwnCloud File Firewall that stems from the system failing to properly enforce public shared file type restrictions. No details of the vulnerability are available ...

Owncloud 授权问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An authorization issue vulnerability exists in OwnCloud, which can be exploited by an attacker to bypass authentication of password-protected images by displaying a preview...

Owncloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A Permission License and Access Control Issue vulnerability exists in OwnCloud Server, which can be exploited by an attacker to remove access to the share from everyone else...

Owncloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A privilege permission and access control issue vulnerability exists in OwnCloud Server, which can be exploited by an attacker to access any version of any file by sending a request with a...

Owncloud 代码问题漏洞

Owncloud OwnCloud is a suite of personal cloud storage solutions from OwnCloud USA. A code issue vulnerability exists in OwnCloud that stems from a server-side request forgery vulnerability in the service. No detailed vulnerability details are available at this time...

Owncloud ownCloud 加密问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An encryption issue vulnerability exists in OwnCloud. The vulnerability stems from a lock protection mechanism that can be bypassed by moving the system date/time to the past. No details of the...

Owncloud ownCloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. OwnCloud has a permission and access control issue vulnerability that can be exploited by an attacker to bypass the PIN locking feature by making a restore from this archive, using adb to include t...

ownCloud < 10.6 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

CVE-2020-28645

Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions 10.6...

CVE-2020-28644

The CSRF Cross Site Request Forgery token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version 10.6...

CVE-2020-28645

Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions 10.6...

CVE-2020-28644

The CSRF Cross Site Request Forgery token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version 10.6...

CVE-2020-28644

The CSRF Cross Site Request Forgery token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version 10.6...

Design/Logic Flaw

Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions 10.6...

CVE-2020-28645

Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions 10.6...