CVE-2021-44537
First published: Sat Jan 15 2022(Updated: )
ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Owncloud Owncloud Desktop Client | <2.9.2 | |
| Fedoraproject Fedora | =35 | |
| Fedoraproject Fedora | =36 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/STKTSNYBZPXBGJOCDAMCZPRXJLAYGDMO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TSZNJFGM66LJONBQFYYQL4GD5XI5QO2Y/
- https://owncloud.com/security-advisories/cve-2021-44537/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSZNJFGM66LJONBQFYYQL4GD5XI5QO2Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STKTSNYBZPXBGJOCDAMCZPRXJLAYGDMO/
Frequently Asked Questions
What is CVE-2021-44537?
CVE-2021-44537 is a vulnerability in ownCloud owncloud/client before 2.9.2 that allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution.
What is the severity of CVE-2021-44537?
The severity of CVE-2021-44537 is high with a severity value of 7.8.
Which software versions are affected by CVE-2021-44537?
ownCloud owncloud/client versions before 2.9.2 are affected by CVE-2021-44537.
How can CVE-2021-44537 be exploited?
CVE-2021-44537 can be exploited by a server injecting a resource into the desktop client via a URL, which can lead to remote code execution.
Is there a fix available for CVE-2021-44537?
Yes, the fix for CVE-2021-44537 is to update ownCloud owncloud/client to version 2.9.2 or newer.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/owncloud
- canonical/owncloud owncloud desktop client
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/35
- version/fedoraproject fedora/36