Vulnerability Details CVE-2021-33828
The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2021-33828
-
cpe:2.3:a:owncloud:files_antivirus:0.11.2
-
cpe:2.3:a:owncloud:files_antivirus:0.12.0
-
cpe:2.3:a:owncloud:files_antivirus:0.13.0
-
cpe:2.3:a:owncloud:files_antivirus:0.14.0
-
cpe:2.3:a:owncloud:files_antivirus:0.15.0
-
cpe:2.3:a:owncloud:files_antivirus:0.15.1
-
cpe:2.3:a:owncloud:files_antivirus:0.15.2
-
cpe:2.3:a:owncloud:files_antivirus:0.16.0
-
cpe:2.3:a:owncloud:files_antivirus:0.7.0
-
cpe:2.3:a:owncloud:files_antivirus:0.7.0.1
-
cpe:2.3:a:owncloud:files_antivirus:0.7.0.2
-
cpe:2.3:a:owncloud:files_antivirus:0.8.0.1