Description
Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has been patched in versions 0.16.11 and 0.17.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| humhub | cfiles | < 0.16.11, >= 0.17.0, < 0.17.2 | — |