← Database

CVE-2021-35949

MEDIUM CVSS: 5.3 Published: 2021-09-07 Modified: 2026-06-17

Description

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

Affected Platforms

Owncloud Owncloud

Weakness Type

CWE-863

References