files_antivirus
by OwnCloud
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-33828 | Hig | 0.57 | 8.8 | 0.01 | Jan 15, 2022 | The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection. | ||
| CVE-2021-33827 | Hig | 0.47 | 7.2 | 0.02 | Jan 15, 2022 | The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings. | ||
| CVE-2020-16144 | Med | 0.37 | 5.7 | 0.01 | Feb 9, 2021 | When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This… |
- risk 0.57cvss 8.8epss 0.01
The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.
- risk 0.47cvss 7.2epss 0.02
The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.
- risk 0.37cvss 5.7epss 0.01
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This…