PT-2022-12158 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 2.9.2 Description: The issue allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution. Recommendations: For versions prior to 2.9.2, update to version 2.9.2 or later ...

PT-2022-10290

Name of the Vulnerable Software and Affected Versions ownCloud files antivirus component versions prior to 1.0.0 Description The issue arises from the mishandling of the protection mechanism in the files antivirus component. This mechanism is supposed to delete malicious files that have been...

PT-2022-10289

Name of the Vulnerable Software and Affected Versions ownCloud files antivirus component versions prior to 1.0.0 Description The issue allows OS Command Injection via the administration settings. This can be exploited through the administration settings of the ownCloud files antivirus component...

CVE-2021-44537: Improper Neutralization of Special Elements in Output Used by a Downstream Component

ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution...

CVE-2021-33828: Unrestricted Upload of File with Dangerous Type

The filesantivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files that have been uploaded to a public share are supposed to be deleted upon detection...

Owncloud 注入漏洞

Owncloud ownCloud is a personal cloud storage solution from the US-based company ownCloud Owncloud. A security vulnerability exists in Owncloud ownCloud that allows the server to inject resources into a desktop client via a URL, which can lead to remote code execution...

CVE-2021-33827: Improper Neutralization of Special Elements used in an OS Command

The filesantivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings...

Missing URL validation allowed RCE on the desktop client - ownCloud

A malicious server could achieve remote code execution on the desktop client because of missing validation of URLs. Exploitation required user interaction...

ownCloud Insecure Direct Object Reference Vulnerability (oC-SA-2016-010)

ownCloud is prone to an insecure direct object reference vulnerability in the Gallery app. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

ownCloud < 4.0.2 Multiple XSS Vulnerabilities

ownCloud is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ownCloud < 4.0.3 XSS Vulnerability (oC-SA-2012-019)

ownCloud is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"...

ownCloud < 5.0.15, 6.0.x < 6.0.2 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

ownCloud < 4.0.5 Multiple Vulnerabilities (oC-SA-2012-018)

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

ownCloud < 4.0.6 Multiple Vulnerabilities (oC-SA-2012-016, oC-SA-2012-017)

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

ownCloud <= 8.1.1 RCE Vulnerability (oC-SA-2015-017)

ownCloud is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud...

ownCloud < 4.0.7 Multiple Vulnerabilities (oC-SA-2012-012, oC-SA-2012-013, oC-SA-2012-014, oC-SA-2012-015)

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...