The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Max CVSS
4.3
EPSS Score
0.08%
Published
2017-03-03
Updated
2017-03-08
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts.
Max CVSS
4.3
EPSS Score
0.12%
Published
2017-03-03
Updated
2017-03-08
2 vulnerabilities found