PT-2020-9748
CVE-2019-15624
·
Published
2019-05-07
·
Updated
2022-01-01
Description by
CVSS 3.1
4.9
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Server version 15.0.7
Description
The issue is related to improper input validation, allowing group admins to create users with IDs of system folders.
Recommendations
For Nextcloud Server version 15.0.7, consider restricting the ability of group admins to create new users until a fix is available. As a temporary workaround, monitor user creation activities closely to prevent potential misuse of system folder IDs.
Found an issue in the description? Have something to add? Feel free to write us 👾