Описание
Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will replace the first one instead of being renamed to {name} (2). It is recommended that the Nextcloud Server is upgraded to 25.0.3 or 24.0.9. Users unable to upgrade should avoid sharing 2 folders with the same name to the same user.
Ссылки
- Vendor Advisory
- ExploitIssue Tracking
- Issue TrackingPatch
- Vendor Advisory
- ExploitIssue Tracking
- Issue TrackingPatch
Уязвимые конфигурации
Одно из
EPSS
5.5 Medium
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
Nextcloud server is an open source home cloud implementation. In affec ...
Уязвимость облачного программного обеспечения для создания и использования хранилища данных Nextcloud, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2023-1116: package `nextcloud` update to version 25.0.3-alt1
ALT-PU-2023-1176: package `nextcloud` update to version 25.0.3-alt1
EPSS
5.5 Medium
CVSS3
8.8 High
CVSS3