VYPR
← All advisories
Medium severity5.7NVD Advisory· Published Feb 9, 2021· Updated Jun 17, 2026

CVE-2020-16144

CVE-2020-16144

Description

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • OwnCloud/files_antivirus2 versions
    cpe:2.3:a:owncloud:files_antivirus:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:owncloud:files_antivirus:*:*:*:*:*:*:*:*range: <0.15.2
    • (no CPE)range: <0.15.2
  • ownCloud/files_antivirusdescription
  • OwnCloud/Owncloudllm-fuzzy
    Range: <0.15.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.