What’s Vulnerable › Vulnerabilities

CVE-2017-9340

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-07-17 · updated 2026-06-17

Description

An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before 10.0.2.

Affected products

• Owncloud: before 10.0.2 — fixed in 10.0.2

How to fix

Upgrade to a fixed version: Owncloud 10.0.2. Check the vendor advisory for mitigations.

References

• https://hackerone.com/reports/166581
• https://owncloud.org/security/advisory/?id=oc-sa-2017-006
• https://hackerone.com/reports/166581
• https://owncloud.org/security/advisory/?id=oc-sa-2017-006

Get alerted when CVE-2017-9340 or the next vulnerability affects your stack