CVE-2021-35949

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about…

published September 7, 2021

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00909 · 59.6th percentile
Published
2021-09-07T18:59Z
EPSS history
Timeline
  • 07 SEP 18:59Z
    The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about…
    cvelistv5