Medium severity5.4NVD Advisory· Published Sep 7, 2021· Updated Jun 17, 2026
CVE-2021-35948
CVE-2021-35948
Description
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ownCloud/ownCloud Serverdescription
Patches
Vulnerability mechanics
References
2- doc.owncloud.com/server/admin_manual/release_notes.htmlnvdRelease NotesVendor Advisory
- owncloud.com/security-advisories/cve-2021-35948/nvdVendor Advisory
News mentions
0No linked articles in our index yet.