Description

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack.

Remediation

References

CVE-2020-10252

Related Vulnerabilities

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (2.9.42)

Atlassian Jira CVE-2019-8442 Vulnerability (CVE-2019-8442)

Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-2372)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6098)

MySQL CVE-2019-2922 Vulnerability (CVE-2019-2922)

Severity

High

Classification

CVE-2020-10252 CWE-918 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Tags

Missing Update Known Vulnerabilities