PT-2020-9745
CVE-2019-15621
·
تاريخ النشر
2020-02-04
·
تاريخ التحديث
2020-10-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Server version 16.0.1
Description
The issue is related to improper permissions preservation, allowing sharees to reshare with write permissions when sharing the mount point of a share they received as a public link.
Recommendations
For Nextcloud Server version 16.0.1, consider restricting the ability to reshare mounts of received shares to prevent unauthorized write access until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾