Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2017-04-05T20:00:00
Updated: 2024-08-05T13:18:06.507Z
Reserved: 2016-11-30T00:00:00
Link: CVE-2017-0885
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-04-05T20:59:00.273
Modified: 2022-10-04T14:04:34.203
Link: CVE-2017-0885
Redhat
No data.