ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NOwncloud
APPOwncloud< 10.10.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2021-35946CRITICAL9.8ten sam produkt
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the...
CVE-2020-28645CRITICAL9.1ten sam produkt
Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow us...
CVE-2014-2052CRITICAL9.8ten sam produkt
Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to re...
CVE-2014-2048CRITICAL9.8ten sam produkt
The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an...
CVE-2020-10252HIGH8.3ten sam produkt
An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external...