medium5.9
CVE-2020-10254
An issue was discovered in ownCloud before 10.4.
Impact
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | before 10.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44
- https://owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/
- https://owncloud.org/changelog/server/
- https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44
- https://owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/
- https://owncloud.org/changelog/server/