medium5.4
CVE-2021-35948
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can for…
Impact
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | before 10.8.0 |