Description
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.
Unscored
CVE-2021-35948
EUVD-2021-22583GHSA-c8x2-fgvf-cxj9
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protecti…
Published Sep 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre