CVE-2020-36252

ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a…

Medium · published February 19, 2021

CVSS v3.1
6.8
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.7th percentile
Published
2021-02-19T06:59Z
EPSS history
Timeline
  • 19 FEB 06:59Z
    ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a…
    cvelistv5