2432 matches found
CVE-2020-16144
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the...
Code injection
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the...
CVE-2020-16144
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the...
CVE-2020-16144
The CVE-2020-16144 issue affects ownCloud's files_antivirus component versions before 0.15.2 when using object storage (e.g., S3) as the file store. If a user creates a public link to a folder allowing anonymous uploads and another user uploads a virus, the antivirus detects the malware but canno...
CVE-2020-16144
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the...
PT-2021-11571
Name of the Vulnerable Software and Affected Versions: ownCloud/core versions prior to 10.6 Description: The issue arises when deleting users with specific names, leading to the deletion of system files. The risk is heightened in systems that allow self-registration and have the data directory...
CVE-2020-16144: Incorrect Default Permissions
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the...
CVE-2020-28644: Cross-Site Request Forgery (CSRF)
The CSRF Cross Site Request Forgery token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version 10.6...
Owncloud 安全漏洞
Owncloud ownCloud is a set of personal cloud storage solutions from the American company ownCloud Owncloud. A security vulnerability exists in versions of OwnCloud prior to 0.15.2, which originates when a user creates a public link to a folder where an anonymous user uploads a file, and another...
PT-2021-11570
Name of the Vulnerable Software and Affected Versions: ownCloud/core versions prior to 10.6 Description: The issue is related to an improper implementation of the CSRF token check on cookie authenticated requests against some ocs API endpoints. Recommendations: For ownCloud/core versions prior to...
PT-2021-9863
Name of the Vulnerable Software and Affected Versions files antivirus component versions prior to 0.15.2 for ownCloud Description The issue arises when using an object storage like S3 as the file store. If a user creates a public link to a folder where anonymous users can upload files and another...
OwnCloud 输入验证错误漏洞
Owncloud ownCloud is a set of personal cloud storage solutions from the American company ownCloud Owncloud. An input validation error vulnerability exists in OwnCloud Core, which arises from a network system or product that does not properly validate incoming data. No detailed vulnerability detai...
CVE-2020-28645: Improper Input Validation
Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions 10.6...
ownCloud < 10.5 XSS Vulnerability
ownCloud is prone to a reflected cross-site scripting vulnerability in the forgot password funcionallity. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2020-16255
ownCloud Core before 10.5 allows XSS in login page 'forgot password.'...
ALPINE-CVE-2020-16255
ownCloud Core before 10.5 allows XSS in login page 'forgot password.'...
CVE-2020-16255
ownCloud Core before 10.5 allows XSS in login page 'forgot password.'...
Default credentials
ownCloud Core before 10.5 allows XSS in login page 'forgot password.'...
