The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-09-07T18:59:40

Updated: 2024-08-04T00:47:42.578Z

Reserved: 2021-06-29T00:00:00

Link: CVE-2021-35949

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-09-07T19:15:08.553

Modified: 2024-11-21T06:12:48.983

Link: CVE-2021-35949

cve-icon Redhat

No data.