CVE-2020-10252

Опубликовано: 19 фев. 2021

Источник: nvd

CVSS3: 8.3

CVSS2: 6.5

EPSS Низкий

Описание

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack.

Ссылки

https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44
Exploit
Third Party Advisory
https://owncloud.com/security-advisories/ssrf-in-add-to-your-owncloud-functionality/
Vendor Advisory
https://owncloud.org/changelog/server/
Product
Release Notes
https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44
Exploit
Third Party Advisory
https://owncloud.com/security-advisories/ssrf-in-add-to-your-owncloud-functionality/
Vendor Advisory
https://owncloud.org/changelog/server/
Product
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*

Версия до 10.4.0 (исключая)

EPSS

Процентиль: 68%

0.00584

Низкий

8.3 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-918

Связанные уязвимости

CVE-2020-10252

CVSS3: 8.3

debian

почти 5 лет назад

An issue was discovered in ownCloud before 10.4. Because of an SSRF is ...

GHSA-jjpp-cjc4-jw4h

github

больше 3 лет назад