| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | = 8.2.0= 8.2.1≤ 7.0.11 | |
| owncloud server | = 8.0.0= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.6= 8.0.8= 8.0.9= 8.1.0= 8.1.1= 8.1.3= 8.1.4 |
ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free