medium6.8
CVE-2020-36252
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a p…
Impact
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud Server | from 10.0.9 before 10.3.1 |