CVE-2020-16144

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user…

published February 9, 2021

CVSS
—
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00797 · 56.0th percentile
Published
2021-02-09T17:59Z
EPSS history
Timeline
  • 09 FEB 17:59Z
    When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user…
    cvelistv5