CVE-2020-36249: ownCloud File Firewall

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.

Affected products

• ownCloud File Firewall: before 2.8.0 (fixed in 2.8.0)

Published 2021-02-19. Last modified 2026-06-17.