Owncloud Files Antivirus vulnerabilities

3 vulnerabilities

Known vulnerabilities in Owncloud Files Antivirus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-33828owncloudfiles_antivirus
EPSS score
1.16%
The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.9CVE-2021-33827owncloudfiles_antivirus
EPSS score
2.09%
The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.5.7CVE-2020-16144owncloudfiles_antivirus
EPSS score
0.80%
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud.