CoreCVE
Back

MEDIUM

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues

Published Feb 9, 2021

Description

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 9, 2021
Updated Aug 4, 2024
Reserved Jul 29, 2020
Link CVE-2020-16144
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-16144
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-16144