Description

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

Remediation

References

CVE-2021-35949

Related Vulnerabilities

PHP Other Vulnerability (CVE-2015-8835)

Oracle JRE CVE-2018-2790 Vulnerability (CVE-2018-2790)

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6483)

WordPress Plugin WP Smart Image II Cross-Site Scripting (0.2)

WordPress Plugin WP Fastest Cache Arbitrary File Deletion (0.8.9.0)

Severity

Medium

Classification

CVE-2021-35949 CWE-863 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities