CVE-2020-36251

ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt