2432 matches found
CVE-2021-40537
Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...
CVE-2021-40537
Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...
CVE-2021-40537
Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...
CVE-2021-40537
CVE-2021-40537 concerns a Server Side Request Forgery (SSRF) in the owncloud/user_ldap extension prior to version 0.15.4. The vulnerability stems from the user_ldap app settings and is exploitable only by users with Administration privileges. Affected component: ownCloud with the user_ldap app; r...
PT-2021-22927
Name of the Vulnerable Software and Affected Versions owncloud/user ldap versions prior to 0.15.4 Description A Server Side Request Forgery SSRF issue exists in the settings of the user ldap app, where an administration role is necessary for exploitation. Recommendations For owncloud/user ldap...
owncloud 代码问题漏洞
Owncloud ownCloud is a personal cloud storage solution from the American company ownCloud Owncloud. A code issue vulnerability exists in owncloud that arises from improper design or implementation during code development of a networked system or product...
ownCloud < 5.0 RCE Vulnerability - Windows
ownCloud is prone to an remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2021-40537: Server-Side Request Forgery (SSRF)
Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...
Server Side Request Forgery (SSRF) through user_ldap app - ownCloud
Server Side Request Forgery SSRF vulnerability in the settings of the userldap app. Administration role is necessary for exploitation...
CVE-2021-35948
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...
CVE-2021-35946
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...
CVE-2021-35946
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...
CVE-2021-35948
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...
CVE-2021-35948
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...
CVE-2021-35948
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...
Design/Logic Flaw
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...
CVE-2021-35946
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...
CVE-2021-35946
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...