CVE-2020-10254

概要

参考情報

• blog.hacktivesecurity.com/index.php · Exploit
• owncloud.com/security-advisories/public-link-password-bypass-via-image-previews · Vendor Advisory
• owncloud.org/changelog/server · Product

owncloud のその他の脆弱性

• CVE-2022-43679中 5.3The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be…
• CVE-2022-31649高 7.5ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
• CVE-2021-35948中 5.4Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protectio…
• CVE-2021-35946緊急 9.8A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele…
• CVE-2021-35949中 5.3The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and …