What’s Vulnerable › Vulnerabilities

CVE-2020-28646

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-26 · updated 2026-06-17
• Weakness: CWE-427

Description

ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present.

Affected products

• Owncloud Desktop Client: before 2.7 — fixed in 2.7

How to fix

Upgrade to a fixed version: Owncloud Desktop Client 2.7. Check the vendor advisory for mitigations.

References

• https://owncloud.com/security-advisories/cve-2020-28646/
• https://owncloud.com/security-advisories/feed/
• https://owncloud.com/security-advisories/cve-2020-28646/
• https://owncloud.com/security-advisories/feed/

Get alerted when CVE-2020-28646 or the next vulnerability affects your stack