Description

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

Remediation

References

CVE-2021-35949

Related Vulnerabilities

WordPress 4.3.x Possible SQL Injection Vulnerability (4.3 - 4.3.12)

MySQL CVE-2023-21882 Vulnerability (CVE-2023-21882)

Django Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-45116)

WordPress Plugin CSS Hero Cross-Site Scripting (4.03)

WordPress Plugin Content Cards Cross-Site Scripting (0.9.6)

Severity

Medium

Classification

CVE-2021-35949 CWE-863 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities