{"id":"CVE-2017-9339","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-9339","generatedAt":"2026-10-29T01:41:27.638Z","title":"A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars.","description":"A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.","published":"2017-07-17T21:29:01.000Z","lastModified":"2026-06-17T01:27:55.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":[],"affected":["owncloud/owncloud"],"epss":{"score":0.01036,"percentile":0.63729,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.04%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2017-005","tags":["Broken Link","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://owncloud.org/security/advisory/?id=oc-sa-2017-005","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-9339","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}