← Database

CVE-2021-35946

CRITICAL CVSS: 9.8 Published: 2021-09-07 Modified: 2026-06-17

Description

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions.

Affected Platforms

Owncloud Owncloud

Weakness Type

CWE-269

References