Description

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

Remediation

References

CVE-2021-35949

Related Vulnerabilities

WordPress Plugin Fancy Comments WordPress Cross-Site Scripting (1.2.10)

TYPO3 CVE-2024-25119 Vulnerability (CVE-2024-25119)

WordPress Plugin Woocommerce Payment Gateway per Category Cross-Site Scripting (2.0.10)

Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-3805)

WordPress Plugin Admin Menu Tree Page View Multiple Vulnerabilities (2.6.9)

Severity

Medium

Classification

CVE-2021-35949 CWE-863 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities