The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.Referenceshttps://doc.owncloud.com/server/admin_manual/release_notes.htmlhttps://owncloud.com/security-advisories/cve-2021-33828/