ownCloud Incorrect Authorization Vulnerability - CVE-2021-35949 - Vulnerability Database

ownCloud Incorrect Authorization Vulnerability - CVE-2021-35949

Medium

Reference: CVE-2021-35949

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-35949

Title: ownCloud Incorrect Authorization Vulnerability

Overview:

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.