← All advisories

Medium severity5.9NVD Advisory· Published Feb 19, 2021· Updated Jun 17, 2026

CVE-2020-10254

CVE-2020-10254

Description

An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

OwnCloud/Owncloud2 versions
cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*range: <10.4.0
- (no CPE)range: <10.4
ownCloud/ownClouddescription

Patches

Vulnerability mechanics

References

3

blog.hacktivesecurity.com/index.phpnvdExploitThird Party Advisory
owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/nvdVendor Advisory
owncloud.org/changelog/server/nvdProductRelease Notes

News mentions

0

No linked articles in our index yet.