Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8px-4rp9-9f6w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

EPSS

Процентиль: 39%
0.00176
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 4 лет назад

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

CVSS3: 5.3
nvd
больше 4 лет назад

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

CVSS3: 5.3
debian
больше 4 лет назад

The shareinfo controller in the ownCloud Server before 10.8.0 allows a ...

EPSS

Процентиль: 39%
0.00176
Низкий

Дефекты

CWE-863