Skip to content
OpenAdvisories
Unscored CVE-2021-22877 EUVD-2021-10012GHSA-v65r-wc6r-r9x8

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configu…

Published Mar 3, 2021 · Updated Aug 3, 2024 · Assigned by hackerone

Description

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.

Affected products

VendorProductAffectedFixed
— Nextcloud Server Fixed in 20.0.6 —

References