Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ownCloud Generation of Error Message Containing Sensitive Information Vulnerability - CVE-2021-35947 - Vulnerability Database
ownCloud

ownCloud Generation of Error Message Containing Sensitive Information Vulnerability - CVE-2021-35947

Medium
Reference: CVE-2021-35947
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-35947
Title: ownCloud Generation of Error Message Containing Sensitive Information Vulnerability
Overview:

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL.