Deleting received group share for whole group

Aug 10, 2020

Deleting received group share for whole group

Platform: ownCloud Server
Versions: 10.2.0
Date: 2/28/2020

– Risk: Low
– CVSS v3 Base Score: 3.5
– CVSS v3 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
– CWE ID: 385
– CWE Name: Improper Privilege Management


A group-share recipient can remove the received group share for all group-recipients.
No data-loss occurs as the share can be re-created again.


– owncloud/core < v10.3.0

Action taken
Improve permission check when deleting groups.

Your secure file platform

Boost your productivity and enable collaboration within your organization. 

Install Server

The backbone of secure file sharing

Start Online

Our software as a service solution. Hosted securely in Germany.
Ready in a glimpse.

Download Mobile Apps

Bring your productivity game to the next level. Download our Android or iOS app from the app stores.