1 matches found
CVE-2016-1500: Exposure of Sensitive Information to an Unauthorized Actor
ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "fileversions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belongi...
3.5CVSS6.2AI score0.0085EPSS
SaveExploits0References2
20