The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33828.json"