NetSight
critical9.8

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own perm…

Impact

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions.

Affected products

VendorProductAffected versions
OwncloudOwncloud
before 10.8.0

Weakness classification

References