Skip to content
Unrated

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when the...

CVE-2021-35948 First seen on SecPulse
Original description The description as published by the source.

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details