CVE-2020-28644

概要

参考情報

• owncloud.com/security-advisories/cross-site-request-forgery-in-the-ocs-api · Vendor Advisory

owncloud のその他の脆弱性

• CVE-2022-43679中 5.3The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be…
• CVE-2022-31649高 7.5ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
• CVE-2021-35948中 5.4Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protectio…
• CVE-2021-35946緊急 9.8A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele…
• CVE-2021-35949中 5.3The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and …