CVE-2021-44537

HIGH

Owncloud Desktop Client < 2.9.2 - Injection

Title source: rule

Description

ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0109
EPSS Percentile 77.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-74
Status published

Affected Products (3)

owncloud/owncloud_desktop_client < 2.9.2
fedoraproject/fedora
fedoraproject/fedora

Timeline

Published Jan 15, 2022
Tracked Since Feb 18, 2026