PT-2020-9748
CVE-2019-15624
·
تاريخ النشر
2019-05-07
·
تاريخ التحديث
2022-01-01
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Server version 15.0.7
Description
The issue is related to improper input validation, allowing group admins to create users with IDs of system folders.
Recommendations
For Nextcloud Server version 15.0.7, consider restricting the ability of group admins to create new users until a fix is available. As a temporary workaround, monitor user creation activities closely to prevent potential misuse of system folder IDs.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾