Vulnerabilities

TI-2021-13177 CVE-2021-33827 · GHSA-fh7g-qhwg-v6f8

The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.

LOW 36

The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02088 Published 2022-01-15 No fix listed CWE-78

TI-2021-13178 CVE-2021-33828 · GHSA-jx89-9m5w-hcfc

The files_antivirus component before 1.0.0 for ownCloud mishandles the protection…

MEDIUM 40

The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01194 Published 2022-01-15 No fix listed CWE-434

TI-2020-12698 CVE-2020-16144 · GHSA-hqmr-r48f-jfqq

When using an object storage like S3 as the file store, when a user creates a public link…

LOW 27

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the viru…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00807 Published 2021-02-09 No fix listed CWE-276

Vulnerabilities

Filters

The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.

The files_antivirus component before 1.0.0 for ownCloud mishandles the protection…

When using an object storage like S3 as the file store, when a user creates a public link…