CVE-2021-35949
The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.
Published: 2021-09-07 · CVSS: Unscored
The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7