CVE-2020-10252
published 2021-02-19CVE-2020-10252: An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can…
PriorityP340high8.3CVSS 3.1
AVNACLPRLUINSUCHILAH
EPSS
1.25%
65.6th percentile
An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| owncloud | owncloud | < 10.4.0 | 10.4.0 |
CVSS provenance
nvdv3.18.3HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44https://owncloud.com/security-advisories/ssrf-in-add-to-your-owncloud-functionality/https://owncloud.org/changelog/server/https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44https://owncloud.com/security-advisories/ssrf-in-add-to-your-owncloud-functionality/https://owncloud.org/changelog/server/
2021-02-19
Published