Description
The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | nextcloud | unspecified – < 11.0.3-3.1 | 11.0.3-3.1 |