Описание
Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended that the Nextcloud Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3 and that the Nextcloud Enterprise Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3.
Ссылки
- Vendor Advisory
- Patch
- Issue Tracking
- Vendor Advisory
- Patch
- Issue Tracking
Уязвимые конфигурации
Одно из
EPSS
3.5 Low
CVSS3
5.4 Medium
CVSS3
Дефекты
Связанные уязвимости
Nextcloud Server is a self hosted personal cloud system. A malicious u ...
Уязвимость компонента Delete облачного программного обеспечения для создания и использования хранилища данных Nextcloud Server, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2024-7291: package `nextcloud` update to version 28.0.5-alt1
ALT-PU-2024-10161: package `nextcloud` update to version 29.0.2-alt1
EPSS
3.5 Low
CVSS3
5.4 Medium
CVSS3