CVE-2021-35949

—

CVSS 3.1

5.3 medium

EPSS

<1%p58

Published

Sep 7, 2021 (Sep 7, 2021)

Modified

Jun 17, 2026

Description

The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.

Vendors: owncloud
Products: owncloud
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.