Description

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack.

Remediation

References

CVE-2020-10252

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2002-2012)

Mailman Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-2775)

WordPress 5.0.x Prototype Pollution (5.0 - 5.0.15)

Oracle Database Server CVE-2014-2478 Vulnerability (CVE-2014-2478)

WordPress Plugin CIP4 Folder Download Widget Local File Inclusion (1.10)

Severity

High

Classification

CVE-2020-10252 CWE-918 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Tags

Missing Update Known Vulnerabilities