CVE-2020-10252: ownCloud

High severity, CVSS 8.3. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack.

Affected products

• ownCloud ownCloud: before 10.4.0 (fixed in 10.4.0)

Published 2021-02-19. Last modified 2026-06-17.