| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | < 10.8.0 | 10.8.0 |
The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free