CVE-2020-36252

ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number...

CVE-2020-10252

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

CVE-2020-10252

CVE-2020-10252 affects ownCloud prior to 10.4. The issue is an SSRF flaw triggered via the apps/files_sharing/external remote parameter, allowing an authenticated attacker to interact with local services blind(ly) or perform a Denial of Service. The description does not provide explicit exploit d...

CVE-2020-10254

An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...

CVE-2020-10254

CVE-2020-10254 affects ownCloud prior to 10.4, where an attacker can bypass authentication by leveraging the preview of a password-protected image. The vulnerability relates to access control on image previews, potentially allowing unauthorized users to view protected content. The issue is docume...

CVE-2020-10252: Server-Side Request Forgery (SSRF)

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue via the apps/filessharing/external remote parameter, an authenticated attacker can interact with local services blindly aka Blind SSRF or conduct a Denial Of Service attack...

PT-2021-9144

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 10.4 Description An issue was discovered in ownCloud due to a Server-Side Request Forgery SSRF problem via the apps/files sharing/external remote parameter. This allows an authenticated attacker to interact with loca...

PT-2021-11985

Name of the Vulnerable Software and Affected Versions: ownCloud Server versions prior to 10.3.0 Description: The issue allows an attacker with non-administrative access to a group share to remove everyone else's access to that share. Recommendations: For ownCloud Server versions prior to 10.3.0,...

PT-2021-11984

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 2.15 for Android Description: The lock protection mechanism in the ownCloud application can be bypassed by moving the system date and time into the past. This allows an attacker to circumvent the security measures i...

PT-2021-11983

Name of the Vulnerable Software and Affected Versions: ownCloud Server File Firewall versions prior to 2.8.0 Description: The issue concerns the improper enforcement of file-type restrictions for public shares. This affects the ownCloud Server File Firewall, where file-type restrictions are not...

PT-2021-11986

Name of the Vulnerable Software and Affected Versions: ownCloud Server versions 10.x before 10.3.1 Description: The issue allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number. Recommendations: For ownCloud...

PT-2021-9145

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 10.4 Description An issue was discovered in ownCloud where an attacker can bypass authentication on a password-protected image by displaying its preview. Recommendations For ownCloud versions prior to 10.4, update to...

Owncloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A privilege permission and access control issue vulnerability exists in OwnCloud Server, which can be exploited by an attacker to access any version of any file by sending a request with a...

Owncloud ownCloud 加密问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An encryption issue vulnerability exists in OwnCloud. The vulnerability stems from a lock protection mechanism that can be bypassed by moving the system date/time to the past. No details of the...

Owncloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A Permission License and Access Control Issue vulnerability exists in OwnCloud Server, which can be exploited by an attacker to remove access to the share from everyone else...

Owncloud 代码问题漏洞

Owncloud OwnCloud is a suite of personal cloud storage solutions from OwnCloud USA. A code issue vulnerability exists in OwnCloud that stems from a server-side request forgery vulnerability in the service. No detailed vulnerability details are available at this time...

Owncloud 授权问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An authorization issue vulnerability exists in OwnCloud, which can be exploited by an attacker to bypass authentication of password-protected images by displaying a preview...

Owncloud File Firewall 安全漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A security vulnerability exists in OwnCloud File Firewall that stems from the system failing to properly enforce public shared file type restrictions. No details of the vulnerability are available ...

CVE-2020-10254: Improper Authentication

An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...

Owncloud ownCloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. OwnCloud has a permission and access control issue vulnerability that can be exploited by an attacker to bypass the PIN locking feature by making a restore from this archive, using adb to include t...