CVE-2020-28646

HIGH 7.8CVE-2020-28646 · Published 26/02/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
owncloud desktop client owncloud	`< 2.7`	`2.7`

Description

ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present.

References

owncloud.com/security-advisories/cve-2020-28646 · Vendor Advisory
owncloud.com/security-advisories/feed · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free