VDB

CVE-2021-35947

CVE-2021-35947 PUBLISHED CVSS 5.300000190734863 MEDIUM

The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL.

EPSS 0.26% · 49.2th percentile

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.26%
49.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
owncloudowncloud0

Timeline

  • Sep 7, 2021 CVE Published
  • Sep 8, 2021 EPSS Score
  • Nov 5, 2021 EPSS Score
  • Jan 1, 2022 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 27, 2022 EPSS Score
  • Jun 24, 2022 EPSS Score
  • Aug 21, 2022 EPSS Score
  • Oct 18, 2022 EPSS Score
  • Dec 15, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›