CVE-2020-28646

ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present...

CVE-2020-28646

CVE-2020-28646 affects the ownCloud desktop client prior to 2.7. It allows DLL injection by loading development plugins from certain directories when present. Impact is execution of potentially untrusted plugin code via local access. Remediation: upgrade to version 2.7 or newer (or apply the PTSe...