Skip to content
OpenAdvisories
Medium WID-SEC-2023-0815 1 CVE

Nextcloud: Schwachstelle ermöglicht Offenlegung von Informationen

Published Mar 30, 2023 · Updated Mar 30, 2023 · de-DE

Vendor: Nextcloud Product: Nextcloud Product: Nextcloud Enterprise Server < 24.0.10 Product: Nextcloud Enterprise Server < 25.0.4 Product: Nextcloud Server < 24.0.10 Product: Nextcloud Server < 25.0.4

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Nextcloud ausnutzen, um Informationen offenzulegen.

Product

Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Vulnerabilities 1

  • Medium 5.7
    CVE-2023-28844

    User without download rights can download older version of that file in nextcloud server

    Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download an older version and use that for uncontrolled distribution. This issue has been addressed in versions 24.0.…

    Nextcloud security-advisories

Revision history

  1. #1

    Initiale Fassung

References