CVE-2017-5866

4.3 mediumEPSS 1.0%

Medium (4.3) in owncloud owncloud. EPSS 1.0% chance of exploitation in the next 30 days.

The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

owncloud:owncloud

References

http://www.securityfocus.com/bid/96426
https://owncloud.org/security/advisory/?id=oc-sa-2017-002
http://www.securityfocus.com/bid/96426
https://owncloud.org/security/advisory/?id=oc-sa-2017-002

Check your stack JSON