PT-2021-21743
CVE-2021-37628
·
تاريخ النشر
2021-09-07
·
تاريخ التحديث
2021-09-14
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Richdocuments versions prior to 3.8.4
Nextcloud Richdocuments versions prior to 4.2.1
Description
The File Drop feature in Nextcloud Richdocuments can be bypassed, allowing an attacker to read arbitrary files in a shared folder. This issue affects the "Upload Only" public link shares in Nextcloud when using the Nextcloud Richdocuments app.
Recommendations
For versions prior to 3.8.4, upgrade to version 3.8.4.
For versions prior to 4.2.1, upgrade to version 4.2.1.
If upgrading is not possible, disable the Richdocuments application as a temporary workaround.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾