CVE-2020-16255

Description

References

• owncloud.com/security-advisories/reflected-xss-in-login-page-forgot-password-functionallity · Vendor Advisory
• owncloud.org/security/advisories · Broken Link

Autres vulnérabilités de owncloud

• CVE-2022-43679MOYENNE 5.3The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be…
• CVE-2022-31649ÉLEVÉE 7.5ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
• CVE-2021-35948MOYENNE 5.4Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protectio…
• CVE-2021-35946CRITIQUE 9.8A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele…
• CVE-2021-35949MOYENNE 5.3The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and …