CVE-2019-25337 — OwnCloud 8.1.8 - Username Disclosure
OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send cr…
Published: 2026-02-12 · CVSS: 5.3 · CVSS 4.0
OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7