Описание
The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in FileContentProvider.kt. This issue can lead to information disclosure. Two databases, filelist and owncloud_database, are affected. In version 3.0, the filelist database was deprecated. However, injections affecting owncloud_database remain relevant as of version 3.0.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0 (включая)
cpe:2.3:a:owncloud:owncloud_client:*:*:*:*:*:android:*:*
EPSS
Процентиль: 33%
0.00134
Низкий
6.2 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-89
CWE-89
EPSS
Процентиль: 33%
0.00134
Низкий
6.2 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-89
CWE-89